# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 02.09.2020 11:14:44.642 Process: id = "1" image_name = "software-launcher.exe" filename = "c:\\users\\fd1hvy\\desktop\\software-launcher.exe" page_root = "0x40317000" os_pid = "0x1028" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x560" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x1024 [0069.180] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0070.086] RoInitialize () returned 0x1 [0070.086] RoUninitialize () returned 0x0 [0078.704] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe760 | out: phkResult=0x4fe760*=0x0) returned 0x2 [0078.704] RegCloseKey (hKey=0x80000002) returned 0x0 [0078.714] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x4fe9b8, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0078.737] IsAppThemed () returned 0x1 [0078.783] CoTaskMemAlloc (cb=0xf0) returned 0x783448 [0078.783] CreateActCtxA (pActCtx=0x4fef08) returned 0x78363c [0079.417] CoTaskMemFree (pv=0x783448) [0079.429] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc151 [0079.429] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc197 [0079.442] GetUserNameW (in: lpBuffer=0x4fed30, pcbBuffer=0x4fefa8 | out: lpBuffer="FD1HVy", pcbBuffer=0x4fefa8) returned 1 [0079.449] GetComputerNameW (in: lpBuffer=0x4fed30, nSize=0x4fefa8 | out: lpBuffer="NQDPDE", nSize=0x4fefa8) returned 1 [0083.676] GetCurrentProcess () returned 0xffffffff [0083.676] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4feb70 | out: TokenHandle=0x4feb70*=0x2cc) returned 1 [0083.730] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x4fe5fc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0083.733] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x4feb68 | out: lpFileInformation=0x4feb68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0083.735] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x4fe5c8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0083.735] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x4feb70 | out: lpFileInformation=0x4feb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0083.736] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x4fe564, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0083.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4feaa8) returned 1 [0083.738] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d0 [0083.738] GetFileType (hFile=0x2d0) returned 0x1 [0083.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4feaa4) returned 1 [0083.739] GetFileType (hFile=0x2d0) returned 0x1 [0084.023] GetFileSize (in: hFile=0x2d0, lpFileSizeHigh=0x4feb64 | out: lpFileSizeHigh=0x4feb64*=0x0) returned 0x8c8f [0084.024] ReadFile (in: hFile=0x2d0, lpBuffer=0x2391198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4feb20, lpOverlapped=0x0 | out: lpBuffer=0x2391198*, lpNumberOfBytesRead=0x4feb20*=0x1000, lpOverlapped=0x0) returned 1 [0084.044] ReadFile (in: hFile=0x2d0, lpBuffer=0x2391198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe9cc, lpOverlapped=0x0 | out: lpBuffer=0x2391198*, lpNumberOfBytesRead=0x4fe9cc*=0x1000, lpOverlapped=0x0) returned 1 [0084.047] ReadFile (in: hFile=0x2d0, lpBuffer=0x2391198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe880, lpOverlapped=0x0 | out: lpBuffer=0x2391198*, lpNumberOfBytesRead=0x4fe880*=0x1000, lpOverlapped=0x0) returned 1 [0084.048] ReadFile (in: hFile=0x2d0, lpBuffer=0x2391198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe880, lpOverlapped=0x0 | out: lpBuffer=0x2391198*, lpNumberOfBytesRead=0x4fe880*=0x1000, lpOverlapped=0x0) returned 1 [0084.048] ReadFile (in: hFile=0x2d0, lpBuffer=0x2391198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe880, lpOverlapped=0x0 | out: lpBuffer=0x2391198*, lpNumberOfBytesRead=0x4fe880*=0x1000, lpOverlapped=0x0) returned 1 [0084.048] ReadFile (in: hFile=0x2d0, lpBuffer=0x2391198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe7b8, lpOverlapped=0x0 | out: lpBuffer=0x2391198*, lpNumberOfBytesRead=0x4fe7b8*=0x1000, lpOverlapped=0x0) returned 1 [0084.263] ReadFile (in: hFile=0x2d0, lpBuffer=0x2391198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe93c, lpOverlapped=0x0 | out: lpBuffer=0x2391198*, lpNumberOfBytesRead=0x4fe93c*=0x1000, lpOverlapped=0x0) returned 1 [0084.265] ReadFile (in: hFile=0x2d0, lpBuffer=0x2391198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe848, lpOverlapped=0x0 | out: lpBuffer=0x2391198*, lpNumberOfBytesRead=0x4fe848*=0x1000, lpOverlapped=0x0) returned 1 [0084.265] ReadFile (in: hFile=0x2d0, lpBuffer=0x2391198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe848, lpOverlapped=0x0 | out: lpBuffer=0x2391198*, lpNumberOfBytesRead=0x4fe848*=0xc8f, lpOverlapped=0x0) returned 1 [0084.266] ReadFile (in: hFile=0x2d0, lpBuffer=0x2391198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe90c, lpOverlapped=0x0 | out: lpBuffer=0x2391198*, lpNumberOfBytesRead=0x4fe90c*=0x0, lpOverlapped=0x0) returned 1 [0084.266] CloseHandle (hObject=0x2d0) returned 1 [0084.268] GetCurrentProcess () returned 0xffffffff [0084.268] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fecb8 | out: TokenHandle=0x4fecb8*=0x2d0) returned 1 [0084.269] GetCurrentProcess () returned 0xffffffff [0084.269] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fecb8 | out: TokenHandle=0x4fecb8*=0x2d4) returned 1 [0084.269] GetCurrentProcess () returned 0xffffffff [0084.270] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4feb70 | out: TokenHandle=0x4feb70*=0x2d8) returned 1 [0084.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\software-launcher.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x4feb68 | out: lpFileInformation=0x4feb68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0084.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe.config", nBufferLength=0x105, lpBuffer=0x4fe5c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe.config", lpFilePart=0x0) returned 0x34 [0084.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\software-launcher.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x4feb70 | out: lpFileInformation=0x4feb70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0084.271] GetCurrentProcess () returned 0xffffffff [0084.271] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fecb8 | out: TokenHandle=0x4fecb8*=0x2dc) returned 1 [0084.271] GetCurrentProcess () returned 0xffffffff [0084.271] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fecb8 | out: TokenHandle=0x4fecb8*=0x2e0) returned 1 [0084.293] GetCurrentProcess () returned 0xffffffff [0084.293] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4feb18 | out: TokenHandle=0x4feb18*=0x2e4) returned 1 [0084.298] GetCurrentProcess () returned 0xffffffff [0084.298] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4feb28 | out: TokenHandle=0x4feb28*=0x2e8) returned 1 [0084.393] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0084.434] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6fd40000 [0085.462] AdjustWindowRectEx (in: lpRect=0x4fef48, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50081 | out: lpRect=0x4fef48) returned 1 [0085.464] GetCurrentProcess () returned 0xffffffff [0085.465] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x4fee5c, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x4fee5c*=0x2f0) returned 1 [0085.475] GetCurrentActCtx (in: lphActCtx=0x4fedbc | out: lphActCtx=0x4fedbc*=0x0) returned 1 [0085.475] ActivateActCtx (in: hActCtx=0x78363c, lpCookie=0x4fedcc | out: hActCtx=0x78363c, lpCookie=0x4fedcc) returned 1 [0085.475] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0085.530] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6fb30000 [0086.974] GetModuleHandleW (lpModuleName="user32.dll") returned 0x750c0000 [0086.975] GetProcAddress (hModule=0x750c0000, lpProcName="DefWindowProcW") returned 0x743c0140 [0086.976] GetStockObject (i=5) returned 0x900015 [0086.981] GetModuleHandleW (lpModuleName=0x0) returned 0xb0000 [0086.984] CoTaskMemAlloc (cb=0x5a) returned 0x781330 [0086.984] RegisterClassW (lpWndClass=0x4fec70) returned 0xc196 [0086.985] CoTaskMemFree (pv=0x781330) [0086.985] GetModuleHandleW (lpModuleName=0x0) returned 0xb0000 [0086.986] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0xb0000, lpParam=0x0) returned 0x502b4 [0086.988] SetWindowLongW (hWnd=0x502b4, nIndex=-4, dwNewLong=1950089536) returned 76744126 [0086.989] GetWindowLongW (hWnd=0x502b4, nIndex=-4) returned 1950089536 [0086.993] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe490 | out: phkResult=0x4fe490*=0x308) returned 0x0 [0086.993] RegQueryValueExW (in: hKey=0x308, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x4fe4b0, lpData=0x0, lpcbData=0x4fe4ac*=0x0 | out: lpType=0x4fe4b0*=0x0, lpData=0x0, lpcbData=0x4fe4ac*=0x0) returned 0x2 [0086.993] RegQueryValueExW (in: hKey=0x308, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x4fe4b0, lpData=0x0, lpcbData=0x4fe4ac*=0x0 | out: lpType=0x4fe4b0*=0x0, lpData=0x0, lpcbData=0x4fe4ac*=0x0) returned 0x2 [0086.993] RegCloseKey (hKey=0x308) returned 0x0 [0086.994] SetWindowLongW (hWnd=0x502b4, nIndex=-4, dwNewLong=76744166) returned 1950089536 [0086.995] GetWindowLongW (hWnd=0x502b4, nIndex=-4) returned 76744166 [0086.995] GetWindowLongW (hWnd=0x502b4, nIndex=-16) returned 113311744 [0086.996] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc19a [0087.017] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc19b [0087.017] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502b4, Msg=0x81, wParam=0x0, lParam=0x4fe7e0) returned 0x1 [0087.018] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502b4, Msg=0x83, wParam=0x0, lParam=0x4fe7cc) returned 0x0 [0087.390] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x502b4, Msg=0x1, wParam=0x0, lParam=0x4fe7e0) returned 0x0 [0087.391] GetClientRect (in: hWnd=0x502b4, lpRect=0x4fe4c8 | out: lpRect=0x4fe4c8) returned 1 [0087.391] GetWindowRect (in: hWnd=0x502b4, lpRect=0x4fe4c8 | out: lpRect=0x4fe4c8) returned 1 [0087.392] GetParent (hWnd=0x502b4) returned 0x0 [0087.393] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1f4c0001) returned 1 [0087.427] EtwEventRegister (in: ProviderId=0x23ad428, EnableCallback=0x493060e, CallbackContext=0x0, RegHandle=0x23ad404 | out: RegHandle=0x23ad404) returned 0x0 [0087.553] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000 [0087.553] AdjustWindowRectEx (in: lpRect=0x4feef4, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0x4feef4) returned 1 [0087.554] GetSystemMetrics (nIndex=59) returned 1460 [0087.554] GetSystemMetrics (nIndex=60) returned 920 [0087.554] GetSystemMetrics (nIndex=34) returned 136 [0087.554] GetSystemMetrics (nIndex=35) returned 39 [0087.554] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000 [0087.554] AdjustWindowRectEx (in: lpRect=0x4fedf4, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0x4fedf4) returned 1 [0087.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fec84) returned 1 [0087.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\software-launcher.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x4fed00 | out: lpFileInformation=0x4fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0087.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fec80) returned 1 [0088.274] GetSystemMetrics (nIndex=11) returned 32 [0088.274] GetSystemMetrics (nIndex=12) returned 32 [0088.275] GetDC (hWnd=0x0) returned 0x10105d6 [0088.279] GetDeviceCaps (hdc=0x10105d6, index=12) returned 32 [0088.279] GetDeviceCaps (hdc=0x10105d6, index=14) returned 1 [0088.279] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0088.280] CreateIconFromResourceEx (presbits=0x23c0718, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x170123 [0088.574] CreateCompatibleDC (hdc=0x0) returned 0xba01053a [0088.576] GetSystemDefaultLCID () returned 0x409 [0088.577] GetStockObject (i=17) returned 0xa01c1 [0088.578] GetObjectW (in: h=0xa01c1, c=92, pv=0x4fec44 | out: pv=0x4fec44) returned 92 [0088.579] GetDC (hWnd=0x0) returned 0x10105d6 [0088.754] GdiplusStartup (in: token=0x605ef0, input=0x4fe1f8, output=0x4fe248 | out: token=0x605ef0, output=0x4fe248) returned 0x0 [0088.862] CoTaskMemAlloc (cb=0x5c) returned 0x781538 [0088.864] GdipCreateFontFromLogfontW (hdc=0x10105d6, logfont=0x781538, font=0x4fed0c) returned 0x0 [0095.604] CoTaskMemFree (pv=0x781538) [0095.605] CoTaskMemAlloc (cb=0x5c) returned 0x7812c8 [0095.605] CoTaskMemFree (pv=0x7812c8) [0095.605] CoTaskMemAlloc (cb=0x5c) returned 0x781128 [0095.605] CoTaskMemFree (pv=0x781128) [0095.606] GdipGetFontUnit (font=0x4ab1f08, unit=0x4fecd4) returned 0x0 [0095.606] GdipGetFontSize (font=0x4ab1f08, size=0x4fecd8) returned 0x0 [0095.606] GdipGetFontStyle (font=0x4ab1f08, style=0x4fecd0) returned 0x0 [0095.606] GdipGetFamily (font=0x4ab1f08, family=0x4feccc) returned 0x0 [0095.607] GdipGetFontSize (font=0x4ab1f08, size=0x23c1c84) returned 0x0 [0095.607] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0095.608] GetDC (hWnd=0x0) returned 0xf0105ee [0095.608] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x4fece8) returned 0x0 [0095.637] GdipGetDpiY (graphics=0x5c4f260, dpi=0x23c1d60) returned 0x0 [0095.637] GdipGetFontHeight (font=0x4ab1f08, graphics=0x5c4f260, height=0x4fece0) returned 0x0 [0095.637] GdipGetEmHeight (family=0x4ab9af8, style=0, EmHeight=0x4fece8) returned 0x0 [0095.637] GdipGetLineSpacing (family=0x4ab9af8, style=0, LineSpacing=0x4fece8) returned 0x0 [0095.638] GdipDeleteGraphics (graphics=0x5c4f260) returned 0x0 [0095.638] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1 [0095.639] GdipCreateFont (fontFamily=0x4ab9af8, emSize=0x41040000, style=0, unit=0x3, font=0x23c1d7c) returned 0x0 [0095.639] GdipGetFontSize (font=0x4abef48, size=0x23c1d80) returned 0x0 [0095.639] GdipDeleteFont (font=0x4ab1f08) returned 0x0 [0095.639] GetDC (hWnd=0x0) returned 0xf0105ee [0095.640] GdipCreateFromHDC (hdc=0xf0105ee, graphics=0x4fed1c) returned 0x0 [0095.640] CoTaskMemAlloc (cb=0x5c) returned 0x7810c0 [0095.642] GdipGetLogFontW (font=0x4abef48, graphics=0x5c4f260, logfontW=0x7810c0) returned 0x0 [0095.647] CoTaskMemFree (pv=0x7810c0) [0095.647] CoTaskMemAlloc (cb=0x5c) returned 0x781468 [0095.647] CoTaskMemFree (pv=0x781468) [0095.647] CoTaskMemAlloc (cb=0x5c) returned 0x781468 [0095.647] CoTaskMemFree (pv=0x781468) [0095.648] GdipDeleteGraphics (graphics=0x5c4f260) returned 0x0 [0095.648] ReleaseDC (hWnd=0x0, hDC=0xf0105ee) returned 1 [0095.648] CoTaskMemAlloc (cb=0x5c) returned 0x7812c8 [0095.648] CreateFontIndirectW (lplf=0x7812c8) returned 0x380a0667 [0095.648] CoTaskMemFree (pv=0x7812c8) [0095.649] SelectObject (hdc=0xba01053a, h=0x380a0667) returned 0x8a01c2 [0095.649] GetTextMetricsW (in: hdc=0xba01053a, lptm=0x4fee28 | out: lptm=0x4fee28) returned 1 [0095.673] GetTextExtentPoint32W (in: hdc=0xba01053a, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x23c1fa8 | out: psizl=0x23c1fa8) returned 1 [0095.684] SelectObject (hdc=0xba01053a, h=0x8a01c2) returned 0x380a0667 [0095.688] DeleteDC (hdc=0xba01053a) returned 1 [0095.689] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000 [0095.689] AdjustWindowRectEx (in: lpRect=0x4feb70, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x4feb70) returned 1 [0095.689] AdjustWindowRectEx (in: lpRect=0x4fedb4, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0x4fedb4) returned 1 [0095.690] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fd40000 [0095.690] AdjustWindowRectEx (in: lpRect=0x4feae8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x4feae8) returned 1 [0095.690] AdjustWindowRectEx (in: lpRect=0x4febec, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0x4febec) returned 1 [0095.691] GetSystemMetrics (nIndex=34) returned 136 [0095.691] GetSystemMetrics (nIndex=35) returned 39 [0095.692] GetCurrentActCtx (in: lphActCtx=0x4fef7c | out: lphActCtx=0x4fef7c*=0x0) returned 1 [0095.692] ActivateActCtx (in: hActCtx=0x78363c, lpCookie=0x4fef8c | out: hActCtx=0x78363c, lpCookie=0x4fef8c) returned 1 [0095.693] GetCurrentActCtx (in: lphActCtx=0x4fed9c | out: lphActCtx=0x4fed9c*=0x78363c) returned 1 [0095.693] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fb30000 [0095.693] AdjustWindowRectEx (in: lpRect=0x4fecdc, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x4fecdc) returned 1 [0095.693] GetModuleHandleW (lpModuleName=0x0) returned 0xb0000 [0095.693] CreateWindowExW (dwExStyle=0x50080, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="hidden tear", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=140, nHeight=92, hWndParent=0x0, hMenu=0x0, hInstance=0xb0000, lpParam=0x0) returned 0x302ca [0095.696] SetWindowLongW (hWnd=0x302ca, nIndex=-4, dwNewLong=1950089536) returned 76744126 [0095.696] GetWindowLongW (hWnd=0x302ca, nIndex=-4) returned 1950089536 [0095.697] SetWindowLongW (hWnd=0x302ca, nIndex=-4, dwNewLong=76744246) returned 1950089536 [0095.697] GetWindowLongW (hWnd=0x302ca, nIndex=-4) returned 76744246 [0095.697] GetWindowLongW (hWnd=0x302ca, nIndex=-16) returned 114229248 [0095.697] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x81, wParam=0x0, lParam=0x4fe7c0) returned 0x1 [0095.703] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x83, wParam=0x0, lParam=0x4fe7ac) returned 0x0 [0095.705] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x1, wParam=0x0, lParam=0x4fe7c0) returned 0x0 [0095.705] GetClientRect (in: hWnd=0x302ca, lpRect=0x4fe478 | out: lpRect=0x4fe478) returned 1 [0095.705] GetWindowRect (in: hWnd=0x302ca, lpRect=0x4fe478 | out: lpRect=0x4fe478) returned 1 [0095.706] SetWindowTextW (hWnd=0x302ca, lpString="hidden tear") returned 1 [0095.706] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xc, wParam=0x0, lParam=0x23ad06c) returned 0x1 [0095.725] GetUserObjectInformationA (in: hObj=0x13c, nIndex=1, pvInfo=0x23c24c4, nLength=0xc, lpnLengthNeeded=0x4fe370 | out: pvInfo=0x23c24c4, lpnLengthNeeded=0x4fe370) returned 1 [0095.731] SetConsoleCtrlHandler (HandlerRoutine=0x493065e, Add=1) returned 1 [0095.732] GetModuleHandleW (lpModuleName=0x0) returned 0xb0000 [0095.732] GetModuleHandleW (lpModuleName=0x0) returned 0xb0000 [0095.735] GetClassInfoW (in: hInstance=0xb0000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x23c2528 | out: lpWndClass=0x23c2528) returned 0 [0095.737] CoTaskMemAlloc (cb=0x58) returned 0x78f100 [0095.737] RegisterClassW (lpWndClass=0x4fe2c0) returned 0xc19d [0095.737] CoTaskMemFree (pv=0x78f100) [0095.739] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xb0000, lpParam=0x0) returned 0x401e2 [0095.762] NtdllDefWindowProc_W (hWnd=0x401e2, Msg=0x83, wParam=0x0, lParam=0x4fddec) returned 0x0 [0095.762] NtdllDefWindowProc_W (hWnd=0x401e2, Msg=0x1, wParam=0x0, lParam=0x4fde00) returned 0x0 [0095.763] NtdllDefWindowProc_W (hWnd=0x401e2, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0095.763] NtdllDefWindowProc_W (hWnd=0x401e2, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0095.769] GetStartupInfoW (in: lpStartupInfo=0x23c28a8 | out: lpStartupInfo=0x23c28a8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0095.772] GetParent (hWnd=0x302ca) returned 0x0 [0095.772] SetWindowLongW (hWnd=0x302ca, nIndex=-8, dwNewLong=0) returned 0 [0095.774] GetSystemMetrics (nIndex=49) returned 16 [0095.774] GetSystemMetrics (nIndex=50) returned 16 [0095.774] CreateIconFromResourceEx (presbits=0x23c2928, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xf0097 [0095.777] SendMessageW (hWnd=0x302ca, Msg=0x80, wParam=0x0, lParam=0xf0097) returned 0x0 [0095.777] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x80, wParam=0x0, lParam=0xf0097) returned 0x0 [0095.778] SendMessageW (hWnd=0x302ca, Msg=0x80, wParam=0x1, lParam=0x170123) returned 0x0 [0095.778] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x80, wParam=0x1, lParam=0x170123) returned 0x0 [0095.779] GetSystemMenu (hWnd=0x302ca, bRevert=0) returned 0x500e1 [0095.792] GetWindowPlacement (in: hWnd=0x302ca, lpwndpl=0x4fedac | out: lpwndpl=0x4fedac) returned 1 [0095.793] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0095.793] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0095.793] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0095.793] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0095.793] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0095.793] GetClientRect (in: hWnd=0x302ca, lpRect=0x4fedf0 | out: lpRect=0x4fedf0) returned 1 [0095.793] GetClientRect (in: hWnd=0x302ca, lpRect=0x4fed50 | out: lpRect=0x4fed50) returned 1 [0095.793] GetWindowRect (in: hWnd=0x302ca, lpRect=0x4fed50 | out: lpRect=0x4fed50) returned 1 [0095.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fb30000 [0095.794] GetWindowLongW (hWnd=0x302ca, nIndex=-16) returned 114229248 [0095.795] GetWindowTextLengthW (hWnd=0x302ca) returned 11 [0095.795] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0095.795] GetSystemMetrics (nIndex=42) returned 0 [0095.795] GetWindowTextW (in: hWnd=0x302ca, lpString=0x4fecc8, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0095.796] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xd, wParam=0xc, lParam=0x4fecc8) returned 0xb [0095.796] GetWindowTextLengthW (hWnd=0x302ca) returned 11 [0095.796] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0095.796] GetSystemMetrics (nIndex=42) returned 0 [0095.796] GetWindowTextW (in: hWnd=0x302ca, lpString=0x4fecc8, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0095.796] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xd, wParam=0xc, lParam=0x4fecc8) returned 0xb [0095.796] GetWindowLongW (hWnd=0x302ca, nIndex=-16) returned 114229248 [0095.796] GetWindowLongW (hWnd=0x302ca, nIndex=-20) returned 328064 [0095.796] SetWindowLongW (hWnd=0x302ca, nIndex=-16, dwNewLong=47120384) returned 114229248 [0095.796] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x7c, wParam=0xfffffff0, lParam=0x4fed4c) returned 0x0 [0095.797] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x7d, wParam=0xfffffff0, lParam=0x4fed4c) returned 0x0 [0095.800] SetWindowLongW (hWnd=0x302ca, nIndex=-20, dwNewLong=327808) returned 328064 [0095.800] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x7c, wParam=0xffffffec, lParam=0x4fed4c) returned 0x0 [0095.801] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x7d, wParam=0xffffffec, lParam=0x4fed4c) returned 0x0 [0095.802] SetWindowPos (hWnd=0x302ca, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0095.802] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x46, wParam=0x0, lParam=0x4fed64) returned 0x0 [0095.802] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x83, wParam=0x1, lParam=0x4fed3c) returned 0x0 [0095.805] GetWindowPlacement (in: hWnd=0x302ca, lpwndpl=0x4fea90 | out: lpwndpl=0x4fea90) returned 1 [0095.805] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x47, wParam=0x0, lParam=0x4fed64) returned 0x0 [0095.805] GetClientRect (in: hWnd=0x302ca, lpRect=0x4fea40 | out: lpRect=0x4fea40) returned 1 [0095.805] GetWindowRect (in: hWnd=0x302ca, lpRect=0x4fea40 | out: lpRect=0x4fea40) returned 1 [0095.807] RedrawWindow (hWnd=0x302ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0095.807] GetSystemMenu (hWnd=0x302ca, bRevert=0) returned 0x500e1 [0095.807] GetWindowPlacement (in: hWnd=0x302ca, lpwndpl=0x4fed9c | out: lpwndpl=0x4fed9c) returned 1 [0095.807] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0095.807] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0095.807] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0095.807] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0095.807] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0095.807] ShowWindow (hWnd=0x302ca, nCmdShow=5) returned 0 [0095.808] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0095.808] GetWindowTextLengthW (hWnd=0x302ca) returned 11 [0095.809] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0095.809] GetSystemMetrics (nIndex=42) returned 0 [0095.809] GetWindowTextW (in: hWnd=0x302ca, lpString=0x4fe98c, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0095.809] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xd, wParam=0xc, lParam=0x4fe98c) returned 0xb [0095.858] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fb30000 [0095.859] GetWindowLongW (hWnd=0x302ca, nIndex=-16) returned 114229248 [0095.859] GetWindowTextLengthW (hWnd=0x302ca) returned 11 [0095.859] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0095.859] GetSystemMetrics (nIndex=42) returned 0 [0095.859] GetWindowTextW (in: hWnd=0x302ca, lpString=0x4fe86c, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0095.859] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xd, wParam=0xc, lParam=0x4fe86c) returned 0xb [0095.859] GetWindowTextLengthW (hWnd=0x302ca) returned 11 [0095.859] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0095.859] GetSystemMetrics (nIndex=42) returned 0 [0095.859] GetWindowTextW (in: hWnd=0x302ca, lpString=0x4fe86c, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0095.859] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xd, wParam=0xc, lParam=0x4fe86c) returned 0xb [0095.859] GetWindowLongW (hWnd=0x302ca, nIndex=-16) returned 114229248 [0095.859] GetWindowLongW (hWnd=0x302ca, nIndex=-20) returned 328064 [0095.859] SetWindowLongW (hWnd=0x302ca, nIndex=-16, dwNewLong=315555840) returned 114229248 [0095.860] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x7c, wParam=0xfffffff0, lParam=0x4fe8f4) returned 0x0 [0095.868] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x7d, wParam=0xfffffff0, lParam=0x4fe8f4) returned 0x0 [0095.870] SetWindowLongW (hWnd=0x302ca, nIndex=-20, dwNewLong=852096) returned 328064 [0095.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x7c, wParam=0xffffffec, lParam=0x4fe8f4) returned 0x0 [0095.870] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x7d, wParam=0xffffffec, lParam=0x4fe8f4) returned 0x0 [0095.871] SetWindowPos (hWnd=0x302ca, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0095.871] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x46, wParam=0x0, lParam=0x4fe90c) returned 0x0 [0095.872] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x83, wParam=0x1, lParam=0x4fe8e4) returned 0x0 [0095.873] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x85, wParam=0x540407a9, lParam=0x0) returned 0x0 [0095.876] GetWindowPlacement (in: hWnd=0x302ca, lpwndpl=0x4fe654 | out: lpwndpl=0x4fe654) returned 1 [0095.876] GetClientRect (in: hWnd=0x302ca, lpRect=0x4fe600 | out: lpRect=0x4fe600) returned 1 [0095.876] GetWindowTextLengthW (hWnd=0x302ca) returned 11 [0095.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0095.876] GetSystemMetrics (nIndex=42) returned 0 [0095.876] GetWindowTextW (in: hWnd=0x302ca, lpString=0x4fe4c0, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0095.876] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xd, wParam=0xc, lParam=0x4fe4c0) returned 0xb [0095.876] GetClientRect (in: hWnd=0x302ca, lpRect=0x4fe508 | out: lpRect=0x4fe508) returned 1 [0095.878] GetSysColor (nIndex=10) returned 0xb4b4b4 [0095.878] GetSysColor (nIndex=2) returned 0xd1b499 [0095.878] GetSysColor (nIndex=9) returned 0x0 [0095.878] GetSysColor (nIndex=12) returned 0xababab [0095.878] GetSysColor (nIndex=15) returned 0xf0f0f0 [0095.878] GetSysColor (nIndex=20) returned 0xffffff [0095.878] GetSysColor (nIndex=16) returned 0xa0a0a0 [0095.878] GetSysColor (nIndex=15) returned 0xf0f0f0 [0095.878] GetSysColor (nIndex=16) returned 0xa0a0a0 [0095.879] GetSysColor (nIndex=21) returned 0x696969 [0095.879] GetSysColor (nIndex=22) returned 0xe3e3e3 [0095.879] GetSysColor (nIndex=20) returned 0xffffff [0095.879] GetSysColor (nIndex=18) returned 0x0 [0095.879] GetSysColor (nIndex=1) returned 0x0 [0095.879] GetSysColor (nIndex=27) returned 0xead1b9 [0095.879] GetSysColor (nIndex=28) returned 0xf2e4d7 [0095.879] GetSysColor (nIndex=17) returned 0x6d6d6d [0095.879] GetSysColor (nIndex=13) returned 0xd77800 [0095.879] GetSysColor (nIndex=14) returned 0xffffff [0095.879] GetSysColor (nIndex=26) returned 0xcc6600 [0095.879] GetSysColor (nIndex=11) returned 0xfcf7f4 [0095.879] GetSysColor (nIndex=3) returned 0xdbcdbf [0095.879] GetSysColor (nIndex=19) returned 0x0 [0095.879] GetSysColor (nIndex=24) returned 0xe1ffff [0095.879] GetSysColor (nIndex=23) returned 0x0 [0095.879] GetSysColor (nIndex=4) returned 0xf0f0f0 [0095.879] GetSysColor (nIndex=30) returned 0xf0f0f0 [0095.880] GetSysColor (nIndex=29) returned 0xd77800 [0095.880] GetSysColor (nIndex=7) returned 0x0 [0095.880] GetSysColor (nIndex=0) returned 0xc8c8c8 [0095.880] GetSysColor (nIndex=5) returned 0xffffff [0095.880] GetSysColor (nIndex=6) returned 0x646464 [0095.880] GetSysColor (nIndex=8) returned 0x0 [0095.884] GetSystemMetrics (nIndex=80) returned 1 [0095.897] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x49306ae, dwData=0x0) returned 1 [0095.944] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x4fe168 | out: lpmi=0x4fe168) returned 1 [0095.945] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x53010790 [0095.946] GetDeviceCaps (hdc=0x53010790, index=12) returned 32 [0095.946] GetDeviceCaps (hdc=0x53010790, index=14) returned 1 [0095.946] DeleteDC (hdc=0x53010790) returned 1 [0095.950] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0095.950] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0095.950] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x510507ab [0095.950] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0095.950] SaveDC (hdc=0x10105d6) returned 1 [0095.951] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0 [0095.952] CreateSolidBrush (color=0xf0f0f0) returned 0x1c10065f [0095.952] FillRect (hDC=0x10105d6, lprc=0x4fe3a8, hbr=0x1c10065f) returned 1 [0095.953] DeleteObject (ho=0x1c10065f) returned 1 [0095.953] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0095.963] GetWindowPlacement (in: hWnd=0x302ca, lpwndpl=0x4fe638 | out: lpwndpl=0x4fe638) returned 1 [0095.963] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x47, wParam=0x0, lParam=0x4fe90c) returned 0x0 [0095.963] GetClientRect (in: hWnd=0x302ca, lpRect=0x4fe5e8 | out: lpRect=0x4fe5e8) returned 1 [0095.963] GetWindowRect (in: hWnd=0x302ca, lpRect=0x4fe5e8 | out: lpRect=0x4fe5e8) returned 1 [0095.988] RedrawWindow (hWnd=0x302ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0095.988] GetSystemMenu (hWnd=0x302ca, bRevert=0) returned 0x500e1 [0095.988] GetWindowPlacement (in: hWnd=0x302ca, lpwndpl=0x4fe940 | out: lpwndpl=0x4fe940) returned 1 [0095.989] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0095.989] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0095.989] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0095.989] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0095.989] EnableMenuItem (hMenu=0x500e1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0096.073] SetLayeredWindowAttributes (hwnd=0x302ca, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0096.082] GetCurrentThreadId () returned 0x1024 [0096.090] EnumThreadWindows (dwThreadId=0x1024, lpfn=0x49306d6, lParam=0x302ca) returned 1 [0096.228] GetWindowLongW (hWnd=0x401e2, nIndex=-8) returned 0 [0096.228] GetWindowLongW (hWnd=0x302ca, nIndex=-8) returned 0 [0096.228] GetWindowLongW (hWnd=0x502b6, nIndex=-8) returned 197322 [0096.322] SetWindowLongW (hWnd=0x502b6, nIndex=-8, dwNewLong=0) returned 197322 [0096.330] GetParent (hWnd=0x302ca) returned 0x0 [0096.330] GetWindowLongW (hWnd=0x302ca, nIndex=-20) returned 852352 [0096.330] DestroyWindow (hWnd=0x302ca) returned 1 [0096.330] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0096.331] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x46, wParam=0x0, lParam=0x4fe83c) returned 0x0 [0096.334] GetWindowPlacement (in: hWnd=0x302ca, lpwndpl=0x4fe568 | out: lpwndpl=0x4fe568) returned 1 [0096.334] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x47, wParam=0x0, lParam=0x4fe83c) returned 0x0 [0096.334] GetClientRect (in: hWnd=0x302ca, lpRect=0x4fe518 | out: lpRect=0x4fe518) returned 1 [0096.334] GetWindowRect (in: hWnd=0x302ca, lpRect=0x4fe518 | out: lpRect=0x4fe518) returned 1 [0096.336] GetWindowTextLengthW (hWnd=0x302ca) returned 11 [0096.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0096.337] GetSystemMetrics (nIndex=42) returned 0 [0096.337] GetWindowTextW (in: hWnd=0x302ca, lpString=0x4fe43c, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0096.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0xd, wParam=0xc, lParam=0x4fe43c) returned 0xb [0096.337] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0096.338] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x302ca, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0096.342] GetCurrentActCtx (in: lphActCtx=0x4fe8a0 | out: lphActCtx=0x4fe8a0*=0x78363c) returned 1 [0096.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fb30000 [0096.343] GetModuleHandleW (lpModuleName=0x0) returned 0xb0000 [0096.343] CreateWindowExW (dwExStyle=0x90080, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", lpWindowName="hidden tear", dwStyle=0x2cf0000, X=78, Y=78, nWidth=140, nHeight=92, hWndParent=0x0, hMenu=0x0, hInstance=0xb0000, lpParam=0x0) returned 0x6002e [0096.343] SetWindowLongW (hWnd=0x6002e, nIndex=-4, dwNewLong=1950089536) returned 76744126 [0096.343] GetWindowLongW (hWnd=0x6002e, nIndex=-4) returned 1950089536 [0096.344] SetWindowLongW (hWnd=0x6002e, nIndex=-4, dwNewLong=76744446) returned 1950089536 [0096.344] GetWindowLongW (hWnd=0x6002e, nIndex=-4) returned 76744446 [0096.344] GetWindowLongW (hWnd=0x6002e, nIndex=-16) returned 114229248 [0096.345] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x81, wParam=0x0, lParam=0x4fe2c0) returned 0x1 [0096.346] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x83, wParam=0x0, lParam=0x4fe2ac) returned 0x0 [0096.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x1, wParam=0x0, lParam=0x4fe2c0) returned 0x0 [0096.347] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fdf78 | out: lpRect=0x4fdf78) returned 1 [0096.347] GetWindowRect (in: hWnd=0x6002e, lpRect=0x4fdf78 | out: lpRect=0x4fdf78) returned 1 [0096.347] SetWindowTextW (hWnd=0x6002e, lpString="hidden tear") returned 1 [0096.347] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xc, wParam=0x0, lParam=0x23c3db0) returned 0x1 [0096.348] SetLayeredWindowAttributes (hwnd=0x6002e, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0096.350] GetStartupInfoW (in: lpStartupInfo=0x23c408c | out: lpStartupInfo=0x23c408c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0096.355] GetParent (hWnd=0x6002e) returned 0x0 [0096.355] GetStockObject (i=5) returned 0x900015 [0096.356] GetModuleHandleW (lpModuleName=0x0) returned 0xb0000 [0096.356] CoTaskMemAlloc (cb=0x5a) returned 0x7812c8 [0096.356] RegisterClassW (lpWndClass=0x4fe77c) returned 0xc19e [0096.357] CoTaskMemFree (pv=0x7812c8) [0096.357] GetModuleHandleW (lpModuleName=0x0) returned 0xb0000 [0096.357] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r9_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xb0000, lpParam=0x0) returned 0x70030 [0096.358] SetWindowLongW (hWnd=0x70030, nIndex=-4, dwNewLong=1950089536) returned 76744486 [0096.358] GetWindowLongW (hWnd=0x70030, nIndex=-4) returned 1950089536 [0096.358] SetWindowLongW (hWnd=0x70030, nIndex=-4, dwNewLong=76744526) returned 1950089536 [0096.358] GetWindowLongW (hWnd=0x70030, nIndex=-4) returned 76744526 [0096.358] GetWindowLongW (hWnd=0x70030, nIndex=-16) returned 79691776 [0096.361] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x24, wParam=0x0, lParam=0x4fe2f4) returned 0x0 [0096.361] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x81, wParam=0x0, lParam=0x4fe2e8) returned 0x1 [0096.362] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x83, wParam=0x0, lParam=0x4fe2d4) returned 0x0 [0096.363] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x1, wParam=0x0, lParam=0x4fe2e8) returned 0x0 [0096.364] SetWindowLongW (hWnd=0x6002e, nIndex=-8, dwNewLong=458800) returned 0 [0096.366] SendMessageW (hWnd=0x6002e, Msg=0x80, wParam=0x0, lParam=0xf0097) returned 0x0 [0096.366] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x80, wParam=0x0, lParam=0xf0097) returned 0x0 [0096.366] SendMessageW (hWnd=0x6002e, Msg=0x80, wParam=0x1, lParam=0x170123) returned 0x0 [0096.367] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x80, wParam=0x1, lParam=0x170123) returned 0x0 [0096.516] GetSystemMenu (hWnd=0x6002e, bRevert=0) returned 0x600e1 [0096.516] GetWindowPlacement (in: hWnd=0x6002e, lpwndpl=0x4fe8b0 | out: lpwndpl=0x4fe8b0) returned 1 [0096.517] EnableMenuItem (hMenu=0x600e1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0096.517] EnableMenuItem (hMenu=0x600e1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0096.517] EnableMenuItem (hMenu=0x600e1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0096.517] EnableMenuItem (hMenu=0x600e1, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0096.517] EnableMenuItem (hMenu=0x600e1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0096.517] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe8f4 | out: lpRect=0x4fe8f4) returned 1 [0096.517] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe854 | out: lpRect=0x4fe854) returned 1 [0096.517] GetWindowRect (in: hWnd=0x6002e, lpRect=0x4fe854 | out: lpRect=0x4fe854) returned 1 [0096.517] SetWindowPos (hWnd=0x6002e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0096.517] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x46, wParam=0x0, lParam=0x4fe7bc) returned 0x0 [0096.545] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0096.548] GetWindowPlacement (in: hWnd=0x6002e, lpwndpl=0x4fe504 | out: lpwndpl=0x4fe504) returned 1 [0096.548] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe4b0 | out: lpRect=0x4fe4b0) returned 1 [0096.548] GetWindowTextLengthW (hWnd=0x6002e) returned 11 [0096.548] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0096.548] GetSystemMetrics (nIndex=42) returned 0 [0096.549] GetWindowTextW (in: hWnd=0x6002e, lpString=0x4fe370, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0096.549] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xd, wParam=0xc, lParam=0x4fe370) returned 0xb [0096.549] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe3b8 | out: lpRect=0x4fe3b8) returned 1 [0096.549] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0096.549] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0096.549] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x1b0507a4 [0096.549] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0096.549] SaveDC (hdc=0x60100ce) returned 1 [0096.549] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0 [0096.549] CreateSolidBrush (color=0xf0f0f0) returned 0x1d10065f [0096.549] FillRect (hDC=0x60100ce, lprc=0x4fe258, hbr=0x1d10065f) returned 1 [0096.549] DeleteObject (ho=0x1d10065f) returned 1 [0096.550] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0096.550] GetWindowPlacement (in: hWnd=0x6002e, lpwndpl=0x4fe4e8 | out: lpwndpl=0x4fe4e8) returned 1 [0096.550] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x47, wParam=0x0, lParam=0x4fe7bc) returned 0x0 [0096.550] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe498 | out: lpRect=0x4fe498) returned 1 [0096.550] GetWindowRect (in: hWnd=0x6002e, lpRect=0x4fe498 | out: lpRect=0x4fe498) returned 1 [0096.553] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x83, wParam=0x1, lParam=0x4fe2d4) returned 0x0 [0096.556] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0096.559] GetWindowPlacement (in: hWnd=0x6002e, lpwndpl=0x4fe044 | out: lpwndpl=0x4fe044) returned 1 [0096.559] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fdff0 | out: lpRect=0x4fdff0) returned 1 [0096.559] GetWindowTextLengthW (hWnd=0x6002e) returned 11 [0096.559] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0096.559] GetSystemMetrics (nIndex=42) returned 0 [0096.559] GetWindowTextW (in: hWnd=0x6002e, lpString=0x4fdeb0, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0096.559] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xd, wParam=0xc, lParam=0x4fdeb0) returned 0xb [0096.559] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fdef8 | out: lpRect=0x4fdef8) returned 1 [0096.559] GetCurrentObject (hdc=0xf0105ee, type=0x1) returned 0xb00017 [0096.559] GetCurrentObject (hdc=0xf0105ee, type=0x2) returned 0x900010 [0096.559] GetCurrentObject (hdc=0xf0105ee, type=0x7) returned 0x1b0507a4 [0096.560] GetCurrentObject (hdc=0xf0105ee, type=0x6) returned 0x8a01c2 [0096.560] SaveDC (hdc=0xf0105ee) returned 1 [0096.560] GetNearestColor (hdc=0xf0105ee, color=0xf0f0f0) returned 0xf0f0f0 [0096.560] CreateSolidBrush (color=0xf0f0f0) returned 0x1e10065f [0096.560] FillRect (hDC=0xf0105ee, lprc=0x4fdd98, hbr=0x1e10065f) returned 1 [0096.560] DeleteObject (ho=0x1e10065f) returned 1 [0096.560] RestoreDC (hdc=0xf0105ee, nSavedDC=-1) returned 1 [0096.561] SetWindowLongW (hWnd=0x6002e, nIndex=-8, dwNewLong=458800) returned 458800 [0096.563] SendMessageW (hWnd=0x70030, Msg=0x80, wParam=0x1, lParam=0x170123) returned 0x0 [0096.563] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x80, wParam=0x1, lParam=0x170123) returned 0x0 [0096.566] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fb30000 [0096.567] GetWindowLongW (hWnd=0x6002e, nIndex=-16) returned 382664704 [0096.567] GetWindowTextLengthW (hWnd=0x6002e) returned 11 [0096.567] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0096.567] GetSystemMetrics (nIndex=42) returned 0 [0096.567] GetWindowTextW (in: hWnd=0x6002e, lpString=0x4fe7cc, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0096.567] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xd, wParam=0xc, lParam=0x4fe7cc) returned 0xb [0096.567] GetWindowTextLengthW (hWnd=0x6002e) returned 11 [0096.567] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0096.567] GetSystemMetrics (nIndex=42) returned 0 [0096.567] GetWindowTextW (in: hWnd=0x6002e, lpString=0x4fe7cc, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0096.568] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xd, wParam=0xc, lParam=0x4fe7cc) returned 0xb [0096.568] GetWindowLongW (hWnd=0x6002e, nIndex=-16) returned 382664704 [0096.568] GetWindowLongW (hWnd=0x6002e, nIndex=-20) returned 590208 [0096.568] SetWindowLongW (hWnd=0x6002e, nIndex=-16, dwNewLong=315555840) returned 382664704 [0096.568] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x7c, wParam=0xfffffff0, lParam=0x4fe854) returned 0x0 [0096.574] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x7d, wParam=0xfffffff0, lParam=0x4fe854) returned 0x0 [0096.574] SetWindowLongW (hWnd=0x6002e, nIndex=-20, dwNewLong=589952) returned 590208 [0096.575] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x7c, wParam=0xffffffec, lParam=0x4fe854) returned 0x0 [0096.575] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x7d, wParam=0xffffffec, lParam=0x4fe854) returned 0x0 [0096.576] SetWindowPos (hWnd=0x6002e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0096.576] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x46, wParam=0x0, lParam=0x4fe86c) returned 0x0 [0096.577] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x83, wParam=0x1, lParam=0x4fe844) returned 0x0 [0096.579] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0096.581] GetWindowPlacement (in: hWnd=0x6002e, lpwndpl=0x4fe5b4 | out: lpwndpl=0x4fe5b4) returned 1 [0096.581] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe560 | out: lpRect=0x4fe560) returned 1 [0096.581] GetWindowTextLengthW (hWnd=0x6002e) returned 11 [0096.581] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0096.581] GetSystemMetrics (nIndex=42) returned 0 [0096.581] GetWindowTextW (in: hWnd=0x6002e, lpString=0x4fe420, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0096.582] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xd, wParam=0xc, lParam=0x4fe420) returned 0xb [0096.582] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe468 | out: lpRect=0x4fe468) returned 1 [0096.582] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0096.582] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0096.582] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x1b0507a4 [0096.582] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0096.582] SaveDC (hdc=0x60100ce) returned 1 [0096.582] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0 [0096.582] CreateSolidBrush (color=0xf0f0f0) returned 0x1f10065f [0096.583] FillRect (hDC=0x60100ce, lprc=0x4fe308, hbr=0x1f10065f) returned 1 [0096.583] DeleteObject (ho=0x1f10065f) returned 1 [0096.583] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0096.583] GetWindowPlacement (in: hWnd=0x6002e, lpwndpl=0x4fe598 | out: lpwndpl=0x4fe598) returned 1 [0096.584] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x47, wParam=0x0, lParam=0x4fe86c) returned 0x0 [0096.584] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe548 | out: lpRect=0x4fe548) returned 1 [0096.584] GetWindowRect (in: hWnd=0x6002e, lpRect=0x4fe548 | out: lpRect=0x4fe548) returned 1 [0096.585] RedrawWindow (hWnd=0x6002e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0096.585] GetSystemMenu (hWnd=0x6002e, bRevert=0) returned 0x600e1 [0096.585] GetWindowPlacement (in: hWnd=0x6002e, lpwndpl=0x4fe8a0 | out: lpwndpl=0x4fe8a0) returned 1 [0096.585] EnableMenuItem (hMenu=0x600e1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0096.585] EnableMenuItem (hMenu=0x600e1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0096.585] EnableMenuItem (hMenu=0x600e1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0096.585] EnableMenuItem (hMenu=0x600e1, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0096.585] EnableMenuItem (hMenu=0x600e1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0096.586] SetWindowLongW (hWnd=0x502b6, nIndex=-8, dwNewLong=393262) returned 262626 [0096.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0096.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0096.941] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x56562a08, ftLastAccessTime.dwHighDateTime=0x1d6811a, ftLastWriteTime.dwLowDateTime=0x56562a08, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77da00 [0096.943] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x56562a08, ftLastAccessTime.dwHighDateTime=0x1d6811a, ftLastWriteTime.dwLowDateTime=0x56562a08, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.943] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263d9f80, ftCreationTime.dwHighDateTime=0x1d5e853, ftLastAccessTime.dwLowDateTime=0xa876c1d0, ftLastAccessTime.dwHighDateTime=0x1d5eec9, ftLastWriteTime.dwLowDateTime=0xa876c1d0, ftLastWriteTime.dwHighDateTime=0x1d5eec9, nFileSizeHigh=0x0, nFileSizeLow=0x1060a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0AnA0vZk.png", cAlternateFileName="")) returned 1 [0096.944] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2207d2a0, ftCreationTime.dwHighDateTime=0x1d5e240, ftLastAccessTime.dwLowDateTime=0xef59ebb0, ftLastAccessTime.dwHighDateTime=0x1d5e6e3, ftLastWriteTime.dwLowDateTime=0xef59ebb0, ftLastWriteTime.dwHighDateTime=0x1d5e6e3, nFileSizeHigh=0x0, nFileSizeLow=0x9299, dwReserved0=0x0, dwReserved1=0x0, cFileName="1t8mDR.jpg", cAlternateFileName="")) returned 1 [0096.944] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db178f0, ftCreationTime.dwHighDateTime=0x1d5e542, ftLastAccessTime.dwLowDateTime=0xafdddc00, ftLastAccessTime.dwHighDateTime=0x1d5e637, ftLastWriteTime.dwLowDateTime=0xafdddc00, ftLastWriteTime.dwHighDateTime=0x1d5e637, nFileSizeHigh=0x0, nFileSizeLow=0x1381d, dwReserved0=0x0, dwReserved1=0x0, cFileName="5nnvD0SnI8rgfUNd.ots", cAlternateFileName="5NNVD0~1.OTS")) returned 1 [0096.944] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33603830, ftCreationTime.dwHighDateTime=0x1d5e11e, ftLastAccessTime.dwLowDateTime=0xb5b0a230, ftLastAccessTime.dwHighDateTime=0x1d5e6c7, ftLastWriteTime.dwLowDateTime=0xb5b0a230, ftLastWriteTime.dwHighDateTime=0x1d5e6c7, nFileSizeHigh=0x0, nFileSizeLow=0x12196, dwReserved0=0x0, dwReserved1=0x0, cFileName="7wdYXjKcwK4g32pSz.pptx", cAlternateFileName="7WDYXJ~1.PPT")) returned 1 [0096.945] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a10d140, ftCreationTime.dwHighDateTime=0x1d5ee51, ftLastAccessTime.dwLowDateTime=0x67c689c0, ftLastAccessTime.dwHighDateTime=0x1d5ec6e, ftLastWriteTime.dwLowDateTime=0x67c689c0, ftLastWriteTime.dwHighDateTime=0x1d5ec6e, nFileSizeHigh=0x0, nFileSizeLow=0x70e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7Y_nAekfhaFT.ots", cAlternateFileName="7Y_NAE~1.OTS")) returned 1 [0096.945] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d737440, ftCreationTime.dwHighDateTime=0x1d5e27e, ftLastAccessTime.dwLowDateTime=0x6acde4e0, ftLastAccessTime.dwHighDateTime=0x1d5ec43, ftLastWriteTime.dwLowDateTime=0x6acde4e0, ftLastWriteTime.dwHighDateTime=0x1d5ec43, nFileSizeHigh=0x0, nFileSizeLow=0x15e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dcH4og.wav", cAlternateFileName="")) returned 1 [0096.945] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc0f3e0, ftCreationTime.dwHighDateTime=0x1d5ef07, ftLastAccessTime.dwLowDateTime=0xa2b05e30, ftLastAccessTime.dwHighDateTime=0x1d5ef2a, ftLastWriteTime.dwLowDateTime=0xa2b05e30, ftLastWriteTime.dwHighDateTime=0x1d5ef2a, nFileSizeHigh=0x0, nFileSizeLow=0xf43d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARRXev3Mman5ZXl_hU.pptx", cAlternateFileName="ARRXEV~1.PPT")) returned 1 [0096.945] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd54e650, ftCreationTime.dwHighDateTime=0x1d5e752, ftLastAccessTime.dwLowDateTime=0x56e0c730, ftLastAccessTime.dwHighDateTime=0x1d5eec4, ftLastWriteTime.dwLowDateTime=0x56e0c730, ftLastWriteTime.dwHighDateTime=0x1d5eec4, nFileSizeHigh=0x0, nFileSizeLow=0x895a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ax8TviU3D2R.ots", cAlternateFileName="AX8TVI~1.OTS")) returned 1 [0096.945] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c13ea0, ftCreationTime.dwHighDateTime=0x1d5e81e, ftLastAccessTime.dwLowDateTime=0xe3556050, ftLastAccessTime.dwHighDateTime=0x1d5e83d, ftLastWriteTime.dwLowDateTime=0xe3556050, ftLastWriteTime.dwHighDateTime=0x1d5e83d, nFileSizeHigh=0x0, nFileSizeLow=0x2171, dwReserved0=0x0, dwReserved1=0x0, cFileName="cXBjfxBR_NO6MB4LO.swf", cAlternateFileName="CXBJFX~1.SWF")) returned 1 [0096.946] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0096.946] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaffb5960, ftCreationTime.dwHighDateTime=0x1d5e1f5, ftLastAccessTime.dwLowDateTime=0x3ad2cd0, ftLastAccessTime.dwHighDateTime=0x1d5e856, ftLastWriteTime.dwLowDateTime=0x3ad2cd0, ftLastWriteTime.dwHighDateTime=0x1d5e856, nFileSizeHigh=0x0, nFileSizeLow=0x1e79, dwReserved0=0x0, dwReserved1=0x0, cFileName="DfKt340.csv", cAlternateFileName="")) returned 1 [0096.946] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870aa1e0, ftCreationTime.dwHighDateTime=0x1d5ea4d, ftLastAccessTime.dwLowDateTime=0x591dcb30, ftLastAccessTime.dwHighDateTime=0x1d5e7fb, ftLastWriteTime.dwLowDateTime=0x591dcb30, ftLastWriteTime.dwHighDateTime=0x1d5e7fb, nFileSizeHigh=0x0, nFileSizeLow=0x1631f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eB_j_8aijU.swf", cAlternateFileName="EB_J_8~1.SWF")) returned 1 [0096.946] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5456d90, ftCreationTime.dwHighDateTime=0x1d5ec2e, ftLastAccessTime.dwLowDateTime=0xc5246710, ftLastAccessTime.dwHighDateTime=0x1d5ef5a, ftLastWriteTime.dwLowDateTime=0xc5246710, ftLastWriteTime.dwHighDateTime=0x1d5ef5a, nFileSizeHigh=0x0, nFileSizeLow=0x17603, dwReserved0=0x0, dwReserved1=0x0, cFileName="F2Zph36bGvFL1Y8.png", cAlternateFileName="F2ZPH3~1.PNG")) returned 1 [0096.946] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395f49c0, ftCreationTime.dwHighDateTime=0x1d5ea5a, ftLastAccessTime.dwLowDateTime=0xed74e240, ftLastAccessTime.dwHighDateTime=0x1d5ed29, ftLastWriteTime.dwLowDateTime=0xed74e240, ftLastWriteTime.dwHighDateTime=0x1d5ed29, nFileSizeHigh=0x0, nFileSizeLow=0x172ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FQAxEs.ppt", cAlternateFileName="")) returned 1 [0096.947] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea6c40, ftCreationTime.dwHighDateTime=0x1d5e9fe, ftLastAccessTime.dwLowDateTime=0x4eef65e0, ftLastAccessTime.dwHighDateTime=0x1d5ecb7, ftLastWriteTime.dwLowDateTime=0x4eef65e0, ftLastWriteTime.dwHighDateTime=0x1d5ecb7, nFileSizeHigh=0x0, nFileSizeLow=0x79e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GJ 5nBR8.jpg", cAlternateFileName="GJ5NBR~1.JPG")) returned 1 [0096.947] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c20920, ftCreationTime.dwHighDateTime=0x1d5eeac, ftLastAccessTime.dwLowDateTime=0x869c6220, ftLastAccessTime.dwHighDateTime=0x1d5e90d, ftLastWriteTime.dwLowDateTime=0x869c6220, ftLastWriteTime.dwHighDateTime=0x1d5e90d, nFileSizeHigh=0x0, nFileSizeLow=0xa320, dwReserved0=0x0, dwReserved1=0x0, cFileName="h 8YJOiiEqZdgeYjPirv.mp3", cAlternateFileName="H8YJOI~1.MP3")) returned 1 [0096.947] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe07393b0, ftCreationTime.dwHighDateTime=0x1d5edfc, ftLastAccessTime.dwLowDateTime=0x164b3390, ftLastAccessTime.dwHighDateTime=0x1d5ee4c, ftLastWriteTime.dwLowDateTime=0x164b3390, ftLastWriteTime.dwHighDateTime=0x1d5ee4c, nFileSizeHigh=0x0, nFileSizeLow=0x17ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="hizAwUh2j6satr-.avi", cAlternateFileName="HIZAWU~1.AVI")) returned 1 [0096.947] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9e3630, ftCreationTime.dwHighDateTime=0x1d5e3fa, ftLastAccessTime.dwLowDateTime=0x23695ba0, ftLastAccessTime.dwHighDateTime=0x1d5e286, ftLastWriteTime.dwLowDateTime=0x23695ba0, ftLastWriteTime.dwHighDateTime=0x1d5e286, nFileSizeHigh=0x0, nFileSizeLow=0xc896, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITjYho8KshiaXF3s6dL.bmp", cAlternateFileName="ITJYHO~1.BMP")) returned 1 [0096.948] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd1b2430, ftCreationTime.dwHighDateTime=0x1d5e526, ftLastAccessTime.dwLowDateTime=0x497dbe0, ftLastAccessTime.dwHighDateTime=0x1d5eb80, ftLastWriteTime.dwLowDateTime=0x497dbe0, ftLastWriteTime.dwHighDateTime=0x1d5eb80, nFileSizeHigh=0x0, nFileSizeLow=0x10b1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IutzQs5O.mp4", cAlternateFileName="")) returned 1 [0096.948] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b7cc600, ftCreationTime.dwHighDateTime=0x1d5f014, ftLastAccessTime.dwLowDateTime=0xf90228e0, ftLastAccessTime.dwHighDateTime=0x1d5e4cb, ftLastWriteTime.dwLowDateTime=0xf90228e0, ftLastWriteTime.dwHighDateTime=0x1d5e4cb, nFileSizeHigh=0x0, nFileSizeLow=0x11314, dwReserved0=0x0, dwReserved1=0x0, cFileName="izcDMK.flv", cAlternateFileName="")) returned 1 [0096.948] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae56edb0, ftCreationTime.dwHighDateTime=0x1d5e883, ftLastAccessTime.dwLowDateTime=0x3a57b450, ftLastAccessTime.dwHighDateTime=0x1d5e2d7, ftLastWriteTime.dwLowDateTime=0x3a57b450, ftLastWriteTime.dwHighDateTime=0x1d5e2d7, nFileSizeHigh=0x0, nFileSizeLow=0x2794, dwReserved0=0x0, dwReserved1=0x0, cFileName="izYGAmbLee1.mp4", cAlternateFileName="IZYGAM~1.MP4")) returned 1 [0096.948] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eaf2170, ftCreationTime.dwHighDateTime=0x1d5eba6, ftLastAccessTime.dwLowDateTime=0x913a9d30, ftLastAccessTime.dwHighDateTime=0x1d5e536, ftLastWriteTime.dwLowDateTime=0x913a9d30, ftLastWriteTime.dwHighDateTime=0x1d5e536, nFileSizeHigh=0x0, nFileSizeLow=0x411c, dwReserved0=0x0, dwReserved1=0x0, cFileName="j0g1E J1dJ6jpYrw2.docx", cAlternateFileName="J0G1EJ~1.DOC")) returned 1 [0096.948] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc2020, ftCreationTime.dwHighDateTime=0x1d5e8fe, ftLastAccessTime.dwLowDateTime=0xab1c6880, ftLastAccessTime.dwHighDateTime=0x1d5e367, ftLastWriteTime.dwLowDateTime=0xab1c6880, ftLastWriteTime.dwHighDateTime=0x1d5e367, nFileSizeHigh=0x0, nFileSizeLow=0x904f, dwReserved0=0x0, dwReserved1=0x0, cFileName="kGaWr7NAi7bG74F9s.m4a", cAlternateFileName="KGAWR7~1.M4A")) returned 1 [0096.948] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d444100, ftCreationTime.dwHighDateTime=0x1d5ec0d, ftLastAccessTime.dwLowDateTime=0xf0b70420, ftLastAccessTime.dwHighDateTime=0x1d5e1d4, ftLastWriteTime.dwLowDateTime=0xf0b70420, ftLastWriteTime.dwHighDateTime=0x1d5e1d4, nFileSizeHigh=0x0, nFileSizeLow=0x1596e, dwReserved0=0x0, dwReserved1=0x0, cFileName="KmRnd.m4a", cAlternateFileName="")) returned 1 [0096.949] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758848b0, ftCreationTime.dwHighDateTime=0x1d5ee39, ftLastAccessTime.dwLowDateTime=0x1a4a5b70, ftLastAccessTime.dwHighDateTime=0x1d5e3c9, ftLastWriteTime.dwLowDateTime=0x1a4a5b70, ftLastWriteTime.dwHighDateTime=0x1d5e3c9, nFileSizeHigh=0x0, nFileSizeLow=0x10c79, dwReserved0=0x0, dwReserved1=0x0, cFileName="nerINvzvqPpVy5jmdDIF.mp3", cAlternateFileName="NERINV~1.MP3")) returned 1 [0096.949] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c58500, ftCreationTime.dwHighDateTime=0x1d5eac7, ftLastAccessTime.dwLowDateTime=0x3637dbe0, ftLastAccessTime.dwHighDateTime=0x1d5e645, ftLastWriteTime.dwLowDateTime=0x3637dbe0, ftLastWriteTime.dwHighDateTime=0x1d5e645, nFileSizeHigh=0x0, nFileSizeLow=0x84ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="oiGY5u9ZB7j.m4a", cAlternateFileName="OIGY5U~1.M4A")) returned 1 [0096.949] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa973db60, ftCreationTime.dwHighDateTime=0x1d5ee59, ftLastAccessTime.dwLowDateTime=0xf5c52b40, ftLastAccessTime.dwHighDateTime=0x1d5e2e7, ftLastWriteTime.dwLowDateTime=0xf5c52b40, ftLastWriteTime.dwHighDateTime=0x1d5e2e7, nFileSizeHigh=0x0, nFileSizeLow=0x1def, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7a19TlEPOBemPq3t.png", cAlternateFileName="P7A19T~1.PNG")) returned 1 [0096.949] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d018500, ftCreationTime.dwHighDateTime=0x1d5e8d3, ftLastAccessTime.dwLowDateTime=0x5909cbd0, ftLastAccessTime.dwHighDateTime=0x1d5e30a, ftLastWriteTime.dwLowDateTime=0x5909cbd0, ftLastWriteTime.dwHighDateTime=0x1d5e30a, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="pBpvOyev.png", cAlternateFileName="")) returned 1 [0096.950] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe375adb0, ftCreationTime.dwHighDateTime=0x1d5e4c8, ftLastAccessTime.dwLowDateTime=0x86cf6e20, ftLastAccessTime.dwHighDateTime=0x1d5e69e, ftLastWriteTime.dwLowDateTime=0x86cf6e20, ftLastWriteTime.dwHighDateTime=0x1d5e69e, nFileSizeHigh=0x0, nFileSizeLow=0x1911, dwReserved0=0x0, dwReserved1=0x0, cFileName="PQ7lQwDEv8H.wav", cAlternateFileName="PQ7LQW~1.WAV")) returned 1 [0096.950] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2657e80, ftCreationTime.dwHighDateTime=0x1d5e7ef, ftLastAccessTime.dwLowDateTime=0x385a43c0, ftLastAccessTime.dwHighDateTime=0x1d5ecf5, ftLastWriteTime.dwLowDateTime=0x385a43c0, ftLastWriteTime.dwHighDateTime=0x1d5ecf5, nFileSizeHigh=0x0, nFileSizeLow=0x35d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="RJyw0fBQM2YxvBD_Jfl.mp3", cAlternateFileName="RJYW0F~1.MP3")) returned 1 [0096.950] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4160bd00, ftCreationTime.dwHighDateTime=0x1d6811a, ftLastAccessTime.dwLowDateTime=0x4160bd00, ftLastAccessTime.dwHighDateTime=0x1d6811a, ftLastWriteTime.dwLowDateTime=0x5b4bd100, ftLastWriteTime.dwHighDateTime=0x1d68115, nFileSizeHigh=0x0, nFileSizeLow=0x33e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="software-launcher.exe", cAlternateFileName="SOFTWA~1.EXE")) returned 1 [0096.950] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17c7880, ftCreationTime.dwHighDateTime=0x1d5ea28, ftLastAccessTime.dwLowDateTime=0xfab0fb90, ftLastAccessTime.dwHighDateTime=0x1d5e371, ftLastWriteTime.dwLowDateTime=0xfab0fb90, ftLastWriteTime.dwHighDateTime=0x1d5e371, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TeX H3fOkrDef9", cAlternateFileName="TEXH3F~1")) returned 1 [0096.950] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4df2060, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0x1373fa30, ftLastAccessTime.dwHighDateTime=0x1d5ecf8, ftLastWriteTime.dwLowDateTime=0x1373fa30, ftLastWriteTime.dwHighDateTime=0x1d5ecf8, nFileSizeHigh=0x0, nFileSizeLow=0x11032, dwReserved0=0x0, dwReserved1=0x0, cFileName="tk-9vhEXizzs.mp4", cAlternateFileName="TK-9VH~1.MP4")) returned 1 [0096.951] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1208fc0, ftCreationTime.dwHighDateTime=0x1d5ee14, ftLastAccessTime.dwLowDateTime=0x53038570, ftLastAccessTime.dwHighDateTime=0x1d5e74f, ftLastWriteTime.dwLowDateTime=0x53038570, ftLastWriteTime.dwHighDateTime=0x1d5e74f, nFileSizeHigh=0x0, nFileSizeLow=0x14edc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uysgQyc.ots", cAlternateFileName="")) returned 1 [0096.951] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dcb39f0, ftCreationTime.dwHighDateTime=0x1d5ed8f, ftLastAccessTime.dwLowDateTime=0x7f7a0520, ftLastAccessTime.dwHighDateTime=0x1d5ed99, ftLastWriteTime.dwLowDateTime=0x7f7a0520, ftLastWriteTime.dwHighDateTime=0x1d5ed99, nFileSizeHigh=0x0, nFileSizeLow=0x12d28, dwReserved0=0x0, dwReserved1=0x0, cFileName="vSCvR6QFBWxnnwzsg.png", cAlternateFileName="VSCVR6~1.PNG")) returned 1 [0096.951] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1afef60, ftCreationTime.dwHighDateTime=0x1d5f041, ftLastAccessTime.dwLowDateTime=0x4addc280, ftLastAccessTime.dwHighDateTime=0x1d5ea78, ftLastWriteTime.dwLowDateTime=0x4addc280, ftLastWriteTime.dwHighDateTime=0x1d5ea78, nFileSizeHigh=0x0, nFileSizeLow=0x153c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wc3rdMhB7eu98iYe.bmp", cAlternateFileName="WC3RDM~1.BMP")) returned 1 [0096.951] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3465f3e0, ftCreationTime.dwHighDateTime=0x1d5e92b, ftLastAccessTime.dwLowDateTime=0x76783070, ftLastAccessTime.dwHighDateTime=0x1d5ec98, ftLastWriteTime.dwLowDateTime=0x76783070, ftLastWriteTime.dwHighDateTime=0x1d5ec98, nFileSizeHigh=0x0, nFileSizeLow=0xaeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEkuJK9Xvx8wD8.bmp", cAlternateFileName="WEKUJK~1.BMP")) returned 1 [0096.952] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff17610, ftCreationTime.dwHighDateTime=0x1d5e2d8, ftLastAccessTime.dwLowDateTime=0xf72f1fb0, ftLastAccessTime.dwHighDateTime=0x1d5e551, ftLastWriteTime.dwLowDateTime=0xf72f1fb0, ftLastWriteTime.dwHighDateTime=0x1d5e551, nFileSizeHigh=0x0, nFileSizeLow=0x14c1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wIOKQftMKCZ jEAtZG.mp3", cAlternateFileName="WIOKQF~1.MP3")) returned 1 [0096.952] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecaffb0, ftCreationTime.dwHighDateTime=0x1d5edef, ftLastAccessTime.dwLowDateTime=0xbc841c30, ftLastAccessTime.dwHighDateTime=0x1d5e349, ftLastWriteTime.dwLowDateTime=0xbc841c30, ftLastWriteTime.dwHighDateTime=0x1d5e349, nFileSizeHigh=0x0, nFileSizeLow=0x7791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y fy.wav", cAlternateFileName="YFY~1.WAV")) returned 1 [0096.952] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bdd0a0, ftCreationTime.dwHighDateTime=0x1d5ef53, ftLastAccessTime.dwLowDateTime=0xd6660c30, ftLastAccessTime.dwHighDateTime=0x1d5e3b7, ftLastWriteTime.dwLowDateTime=0xd6660c30, ftLastWriteTime.dwHighDateTime=0x1d5e3b7, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z1vT.mp4", cAlternateFileName="")) returned 1 [0096.952] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8e37d0, ftCreationTime.dwHighDateTime=0x1d5e2e3, ftLastAccessTime.dwLowDateTime=0x14807a0, ftLastAccessTime.dwHighDateTime=0x1d5e99e, ftLastWriteTime.dwLowDateTime=0x14807a0, ftLastWriteTime.dwHighDateTime=0x1d5e99e, nFileSizeHigh=0x0, nFileSizeLow=0xa2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZlZN.mp3", cAlternateFileName="")) returned 1 [0096.952] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.953] FindClose (in: hFindFile=0x77da00 | out: hFindFile=0x77da00) returned 1 [0096.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0096.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0096.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0096.953] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0096.953] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x56562a08, ftLastAccessTime.dwHighDateTime=0x1d6811a, ftLastWriteTime.dwLowDateTime=0x56562a08, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77da00 [0096.954] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x56562a08, ftLastAccessTime.dwHighDateTime=0x1d6811a, ftLastWriteTime.dwLowDateTime=0x56562a08, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.954] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263d9f80, ftCreationTime.dwHighDateTime=0x1d5e853, ftLastAccessTime.dwLowDateTime=0xa876c1d0, ftLastAccessTime.dwHighDateTime=0x1d5eec9, ftLastWriteTime.dwLowDateTime=0xa876c1d0, ftLastWriteTime.dwHighDateTime=0x1d5eec9, nFileSizeHigh=0x0, nFileSizeLow=0x1060a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0AnA0vZk.png", cAlternateFileName="")) returned 1 [0096.955] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2207d2a0, ftCreationTime.dwHighDateTime=0x1d5e240, ftLastAccessTime.dwLowDateTime=0xef59ebb0, ftLastAccessTime.dwHighDateTime=0x1d5e6e3, ftLastWriteTime.dwLowDateTime=0xef59ebb0, ftLastWriteTime.dwHighDateTime=0x1d5e6e3, nFileSizeHigh=0x0, nFileSizeLow=0x9299, dwReserved0=0x0, dwReserved1=0x0, cFileName="1t8mDR.jpg", cAlternateFileName="")) returned 1 [0096.955] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db178f0, ftCreationTime.dwHighDateTime=0x1d5e542, ftLastAccessTime.dwLowDateTime=0xafdddc00, ftLastAccessTime.dwHighDateTime=0x1d5e637, ftLastWriteTime.dwLowDateTime=0xafdddc00, ftLastWriteTime.dwHighDateTime=0x1d5e637, nFileSizeHigh=0x0, nFileSizeLow=0x1381d, dwReserved0=0x0, dwReserved1=0x0, cFileName="5nnvD0SnI8rgfUNd.ots", cAlternateFileName="5NNVD0~1.OTS")) returned 1 [0096.955] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33603830, ftCreationTime.dwHighDateTime=0x1d5e11e, ftLastAccessTime.dwLowDateTime=0xb5b0a230, ftLastAccessTime.dwHighDateTime=0x1d5e6c7, ftLastWriteTime.dwLowDateTime=0xb5b0a230, ftLastWriteTime.dwHighDateTime=0x1d5e6c7, nFileSizeHigh=0x0, nFileSizeLow=0x12196, dwReserved0=0x0, dwReserved1=0x0, cFileName="7wdYXjKcwK4g32pSz.pptx", cAlternateFileName="7WDYXJ~1.PPT")) returned 1 [0096.956] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a10d140, ftCreationTime.dwHighDateTime=0x1d5ee51, ftLastAccessTime.dwLowDateTime=0x67c689c0, ftLastAccessTime.dwHighDateTime=0x1d5ec6e, ftLastWriteTime.dwLowDateTime=0x67c689c0, ftLastWriteTime.dwHighDateTime=0x1d5ec6e, nFileSizeHigh=0x0, nFileSizeLow=0x70e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7Y_nAekfhaFT.ots", cAlternateFileName="7Y_NAE~1.OTS")) returned 1 [0096.956] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d737440, ftCreationTime.dwHighDateTime=0x1d5e27e, ftLastAccessTime.dwLowDateTime=0x6acde4e0, ftLastAccessTime.dwHighDateTime=0x1d5ec43, ftLastWriteTime.dwLowDateTime=0x6acde4e0, ftLastWriteTime.dwHighDateTime=0x1d5ec43, nFileSizeHigh=0x0, nFileSizeLow=0x15e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dcH4og.wav", cAlternateFileName="")) returned 1 [0096.956] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc0f3e0, ftCreationTime.dwHighDateTime=0x1d5ef07, ftLastAccessTime.dwLowDateTime=0xa2b05e30, ftLastAccessTime.dwHighDateTime=0x1d5ef2a, ftLastWriteTime.dwLowDateTime=0xa2b05e30, ftLastWriteTime.dwHighDateTime=0x1d5ef2a, nFileSizeHigh=0x0, nFileSizeLow=0xf43d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARRXev3Mman5ZXl_hU.pptx", cAlternateFileName="ARRXEV~1.PPT")) returned 1 [0096.956] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd54e650, ftCreationTime.dwHighDateTime=0x1d5e752, ftLastAccessTime.dwLowDateTime=0x56e0c730, ftLastAccessTime.dwHighDateTime=0x1d5eec4, ftLastWriteTime.dwLowDateTime=0x56e0c730, ftLastWriteTime.dwHighDateTime=0x1d5eec4, nFileSizeHigh=0x0, nFileSizeLow=0x895a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ax8TviU3D2R.ots", cAlternateFileName="AX8TVI~1.OTS")) returned 1 [0096.957] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c13ea0, ftCreationTime.dwHighDateTime=0x1d5e81e, ftLastAccessTime.dwLowDateTime=0xe3556050, ftLastAccessTime.dwHighDateTime=0x1d5e83d, ftLastWriteTime.dwLowDateTime=0xe3556050, ftLastWriteTime.dwHighDateTime=0x1d5e83d, nFileSizeHigh=0x0, nFileSizeLow=0x2171, dwReserved0=0x0, dwReserved1=0x0, cFileName="cXBjfxBR_NO6MB4LO.swf", cAlternateFileName="CXBJFX~1.SWF")) returned 1 [0096.957] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0096.957] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaffb5960, ftCreationTime.dwHighDateTime=0x1d5e1f5, ftLastAccessTime.dwLowDateTime=0x3ad2cd0, ftLastAccessTime.dwHighDateTime=0x1d5e856, ftLastWriteTime.dwLowDateTime=0x3ad2cd0, ftLastWriteTime.dwHighDateTime=0x1d5e856, nFileSizeHigh=0x0, nFileSizeLow=0x1e79, dwReserved0=0x0, dwReserved1=0x0, cFileName="DfKt340.csv", cAlternateFileName="")) returned 1 [0096.957] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870aa1e0, ftCreationTime.dwHighDateTime=0x1d5ea4d, ftLastAccessTime.dwLowDateTime=0x591dcb30, ftLastAccessTime.dwHighDateTime=0x1d5e7fb, ftLastWriteTime.dwLowDateTime=0x591dcb30, ftLastWriteTime.dwHighDateTime=0x1d5e7fb, nFileSizeHigh=0x0, nFileSizeLow=0x1631f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eB_j_8aijU.swf", cAlternateFileName="EB_J_8~1.SWF")) returned 1 [0096.958] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5456d90, ftCreationTime.dwHighDateTime=0x1d5ec2e, ftLastAccessTime.dwLowDateTime=0xc5246710, ftLastAccessTime.dwHighDateTime=0x1d5ef5a, ftLastWriteTime.dwLowDateTime=0xc5246710, ftLastWriteTime.dwHighDateTime=0x1d5ef5a, nFileSizeHigh=0x0, nFileSizeLow=0x17603, dwReserved0=0x0, dwReserved1=0x0, cFileName="F2Zph36bGvFL1Y8.png", cAlternateFileName="F2ZPH3~1.PNG")) returned 1 [0096.958] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395f49c0, ftCreationTime.dwHighDateTime=0x1d5ea5a, ftLastAccessTime.dwLowDateTime=0xed74e240, ftLastAccessTime.dwHighDateTime=0x1d5ed29, ftLastWriteTime.dwLowDateTime=0xed74e240, ftLastWriteTime.dwHighDateTime=0x1d5ed29, nFileSizeHigh=0x0, nFileSizeLow=0x172ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FQAxEs.ppt", cAlternateFileName="")) returned 1 [0096.958] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea6c40, ftCreationTime.dwHighDateTime=0x1d5e9fe, ftLastAccessTime.dwLowDateTime=0x4eef65e0, ftLastAccessTime.dwHighDateTime=0x1d5ecb7, ftLastWriteTime.dwLowDateTime=0x4eef65e0, ftLastWriteTime.dwHighDateTime=0x1d5ecb7, nFileSizeHigh=0x0, nFileSizeLow=0x79e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GJ 5nBR8.jpg", cAlternateFileName="GJ5NBR~1.JPG")) returned 1 [0096.958] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c20920, ftCreationTime.dwHighDateTime=0x1d5eeac, ftLastAccessTime.dwLowDateTime=0x869c6220, ftLastAccessTime.dwHighDateTime=0x1d5e90d, ftLastWriteTime.dwLowDateTime=0x869c6220, ftLastWriteTime.dwHighDateTime=0x1d5e90d, nFileSizeHigh=0x0, nFileSizeLow=0xa320, dwReserved0=0x0, dwReserved1=0x0, cFileName="h 8YJOiiEqZdgeYjPirv.mp3", cAlternateFileName="H8YJOI~1.MP3")) returned 1 [0096.959] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe07393b0, ftCreationTime.dwHighDateTime=0x1d5edfc, ftLastAccessTime.dwLowDateTime=0x164b3390, ftLastAccessTime.dwHighDateTime=0x1d5ee4c, ftLastWriteTime.dwLowDateTime=0x164b3390, ftLastWriteTime.dwHighDateTime=0x1d5ee4c, nFileSizeHigh=0x0, nFileSizeLow=0x17ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="hizAwUh2j6satr-.avi", cAlternateFileName="HIZAWU~1.AVI")) returned 1 [0096.959] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9e3630, ftCreationTime.dwHighDateTime=0x1d5e3fa, ftLastAccessTime.dwLowDateTime=0x23695ba0, ftLastAccessTime.dwHighDateTime=0x1d5e286, ftLastWriteTime.dwLowDateTime=0x23695ba0, ftLastWriteTime.dwHighDateTime=0x1d5e286, nFileSizeHigh=0x0, nFileSizeLow=0xc896, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITjYho8KshiaXF3s6dL.bmp", cAlternateFileName="ITJYHO~1.BMP")) returned 1 [0096.959] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd1b2430, ftCreationTime.dwHighDateTime=0x1d5e526, ftLastAccessTime.dwLowDateTime=0x497dbe0, ftLastAccessTime.dwHighDateTime=0x1d5eb80, ftLastWriteTime.dwLowDateTime=0x497dbe0, ftLastWriteTime.dwHighDateTime=0x1d5eb80, nFileSizeHigh=0x0, nFileSizeLow=0x10b1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IutzQs5O.mp4", cAlternateFileName="")) returned 1 [0096.959] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b7cc600, ftCreationTime.dwHighDateTime=0x1d5f014, ftLastAccessTime.dwLowDateTime=0xf90228e0, ftLastAccessTime.dwHighDateTime=0x1d5e4cb, ftLastWriteTime.dwLowDateTime=0xf90228e0, ftLastWriteTime.dwHighDateTime=0x1d5e4cb, nFileSizeHigh=0x0, nFileSizeLow=0x11314, dwReserved0=0x0, dwReserved1=0x0, cFileName="izcDMK.flv", cAlternateFileName="")) returned 1 [0096.960] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae56edb0, ftCreationTime.dwHighDateTime=0x1d5e883, ftLastAccessTime.dwLowDateTime=0x3a57b450, ftLastAccessTime.dwHighDateTime=0x1d5e2d7, ftLastWriteTime.dwLowDateTime=0x3a57b450, ftLastWriteTime.dwHighDateTime=0x1d5e2d7, nFileSizeHigh=0x0, nFileSizeLow=0x2794, dwReserved0=0x0, dwReserved1=0x0, cFileName="izYGAmbLee1.mp4", cAlternateFileName="IZYGAM~1.MP4")) returned 1 [0096.977] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eaf2170, ftCreationTime.dwHighDateTime=0x1d5eba6, ftLastAccessTime.dwLowDateTime=0x913a9d30, ftLastAccessTime.dwHighDateTime=0x1d5e536, ftLastWriteTime.dwLowDateTime=0x913a9d30, ftLastWriteTime.dwHighDateTime=0x1d5e536, nFileSizeHigh=0x0, nFileSizeLow=0x411c, dwReserved0=0x0, dwReserved1=0x0, cFileName="j0g1E J1dJ6jpYrw2.docx", cAlternateFileName="J0G1EJ~1.DOC")) returned 1 [0096.978] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc2020, ftCreationTime.dwHighDateTime=0x1d5e8fe, ftLastAccessTime.dwLowDateTime=0xab1c6880, ftLastAccessTime.dwHighDateTime=0x1d5e367, ftLastWriteTime.dwLowDateTime=0xab1c6880, ftLastWriteTime.dwHighDateTime=0x1d5e367, nFileSizeHigh=0x0, nFileSizeLow=0x904f, dwReserved0=0x0, dwReserved1=0x0, cFileName="kGaWr7NAi7bG74F9s.m4a", cAlternateFileName="KGAWR7~1.M4A")) returned 1 [0096.978] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d444100, ftCreationTime.dwHighDateTime=0x1d5ec0d, ftLastAccessTime.dwLowDateTime=0xf0b70420, ftLastAccessTime.dwHighDateTime=0x1d5e1d4, ftLastWriteTime.dwLowDateTime=0xf0b70420, ftLastWriteTime.dwHighDateTime=0x1d5e1d4, nFileSizeHigh=0x0, nFileSizeLow=0x1596e, dwReserved0=0x0, dwReserved1=0x0, cFileName="KmRnd.m4a", cAlternateFileName="")) returned 1 [0096.978] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758848b0, ftCreationTime.dwHighDateTime=0x1d5ee39, ftLastAccessTime.dwLowDateTime=0x1a4a5b70, ftLastAccessTime.dwHighDateTime=0x1d5e3c9, ftLastWriteTime.dwLowDateTime=0x1a4a5b70, ftLastWriteTime.dwHighDateTime=0x1d5e3c9, nFileSizeHigh=0x0, nFileSizeLow=0x10c79, dwReserved0=0x0, dwReserved1=0x0, cFileName="nerINvzvqPpVy5jmdDIF.mp3", cAlternateFileName="NERINV~1.MP3")) returned 1 [0096.979] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c58500, ftCreationTime.dwHighDateTime=0x1d5eac7, ftLastAccessTime.dwLowDateTime=0x3637dbe0, ftLastAccessTime.dwHighDateTime=0x1d5e645, ftLastWriteTime.dwLowDateTime=0x3637dbe0, ftLastWriteTime.dwHighDateTime=0x1d5e645, nFileSizeHigh=0x0, nFileSizeLow=0x84ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="oiGY5u9ZB7j.m4a", cAlternateFileName="OIGY5U~1.M4A")) returned 1 [0096.979] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa973db60, ftCreationTime.dwHighDateTime=0x1d5ee59, ftLastAccessTime.dwLowDateTime=0xf5c52b40, ftLastAccessTime.dwHighDateTime=0x1d5e2e7, ftLastWriteTime.dwLowDateTime=0xf5c52b40, ftLastWriteTime.dwHighDateTime=0x1d5e2e7, nFileSizeHigh=0x0, nFileSizeLow=0x1def, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7a19TlEPOBemPq3t.png", cAlternateFileName="P7A19T~1.PNG")) returned 1 [0096.979] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d018500, ftCreationTime.dwHighDateTime=0x1d5e8d3, ftLastAccessTime.dwLowDateTime=0x5909cbd0, ftLastAccessTime.dwHighDateTime=0x1d5e30a, ftLastWriteTime.dwLowDateTime=0x5909cbd0, ftLastWriteTime.dwHighDateTime=0x1d5e30a, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="pBpvOyev.png", cAlternateFileName="")) returned 1 [0096.979] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe375adb0, ftCreationTime.dwHighDateTime=0x1d5e4c8, ftLastAccessTime.dwLowDateTime=0x86cf6e20, ftLastAccessTime.dwHighDateTime=0x1d5e69e, ftLastWriteTime.dwLowDateTime=0x86cf6e20, ftLastWriteTime.dwHighDateTime=0x1d5e69e, nFileSizeHigh=0x0, nFileSizeLow=0x1911, dwReserved0=0x0, dwReserved1=0x0, cFileName="PQ7lQwDEv8H.wav", cAlternateFileName="PQ7LQW~1.WAV")) returned 1 [0096.980] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2657e80, ftCreationTime.dwHighDateTime=0x1d5e7ef, ftLastAccessTime.dwLowDateTime=0x385a43c0, ftLastAccessTime.dwHighDateTime=0x1d5ecf5, ftLastWriteTime.dwLowDateTime=0x385a43c0, ftLastWriteTime.dwHighDateTime=0x1d5ecf5, nFileSizeHigh=0x0, nFileSizeLow=0x35d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="RJyw0fBQM2YxvBD_Jfl.mp3", cAlternateFileName="RJYW0F~1.MP3")) returned 1 [0096.980] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4160bd00, ftCreationTime.dwHighDateTime=0x1d6811a, ftLastAccessTime.dwLowDateTime=0x4160bd00, ftLastAccessTime.dwHighDateTime=0x1d6811a, ftLastWriteTime.dwLowDateTime=0x5b4bd100, ftLastWriteTime.dwHighDateTime=0x1d68115, nFileSizeHigh=0x0, nFileSizeLow=0x33e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="software-launcher.exe", cAlternateFileName="SOFTWA~1.EXE")) returned 1 [0096.980] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17c7880, ftCreationTime.dwHighDateTime=0x1d5ea28, ftLastAccessTime.dwLowDateTime=0xfab0fb90, ftLastAccessTime.dwHighDateTime=0x1d5e371, ftLastWriteTime.dwLowDateTime=0xfab0fb90, ftLastWriteTime.dwHighDateTime=0x1d5e371, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TeX H3fOkrDef9", cAlternateFileName="TEXH3F~1")) returned 1 [0096.981] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4df2060, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0x1373fa30, ftLastAccessTime.dwHighDateTime=0x1d5ecf8, ftLastWriteTime.dwLowDateTime=0x1373fa30, ftLastWriteTime.dwHighDateTime=0x1d5ecf8, nFileSizeHigh=0x0, nFileSizeLow=0x11032, dwReserved0=0x0, dwReserved1=0x0, cFileName="tk-9vhEXizzs.mp4", cAlternateFileName="TK-9VH~1.MP4")) returned 1 [0096.981] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1208fc0, ftCreationTime.dwHighDateTime=0x1d5ee14, ftLastAccessTime.dwLowDateTime=0x53038570, ftLastAccessTime.dwHighDateTime=0x1d5e74f, ftLastWriteTime.dwLowDateTime=0x53038570, ftLastWriteTime.dwHighDateTime=0x1d5e74f, nFileSizeHigh=0x0, nFileSizeLow=0x14edc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uysgQyc.ots", cAlternateFileName="")) returned 1 [0096.981] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dcb39f0, ftCreationTime.dwHighDateTime=0x1d5ed8f, ftLastAccessTime.dwLowDateTime=0x7f7a0520, ftLastAccessTime.dwHighDateTime=0x1d5ed99, ftLastWriteTime.dwLowDateTime=0x7f7a0520, ftLastWriteTime.dwHighDateTime=0x1d5ed99, nFileSizeHigh=0x0, nFileSizeLow=0x12d28, dwReserved0=0x0, dwReserved1=0x0, cFileName="vSCvR6QFBWxnnwzsg.png", cAlternateFileName="VSCVR6~1.PNG")) returned 1 [0096.982] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1afef60, ftCreationTime.dwHighDateTime=0x1d5f041, ftLastAccessTime.dwLowDateTime=0x4addc280, ftLastAccessTime.dwHighDateTime=0x1d5ea78, ftLastWriteTime.dwLowDateTime=0x4addc280, ftLastWriteTime.dwHighDateTime=0x1d5ea78, nFileSizeHigh=0x0, nFileSizeLow=0x153c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wc3rdMhB7eu98iYe.bmp", cAlternateFileName="WC3RDM~1.BMP")) returned 1 [0096.982] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3465f3e0, ftCreationTime.dwHighDateTime=0x1d5e92b, ftLastAccessTime.dwLowDateTime=0x76783070, ftLastAccessTime.dwHighDateTime=0x1d5ec98, ftLastWriteTime.dwLowDateTime=0x76783070, ftLastWriteTime.dwHighDateTime=0x1d5ec98, nFileSizeHigh=0x0, nFileSizeLow=0xaeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEkuJK9Xvx8wD8.bmp", cAlternateFileName="WEKUJK~1.BMP")) returned 1 [0096.982] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff17610, ftCreationTime.dwHighDateTime=0x1d5e2d8, ftLastAccessTime.dwLowDateTime=0xf72f1fb0, ftLastAccessTime.dwHighDateTime=0x1d5e551, ftLastWriteTime.dwLowDateTime=0xf72f1fb0, ftLastWriteTime.dwHighDateTime=0x1d5e551, nFileSizeHigh=0x0, nFileSizeLow=0x14c1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wIOKQftMKCZ jEAtZG.mp3", cAlternateFileName="WIOKQF~1.MP3")) returned 1 [0096.982] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecaffb0, ftCreationTime.dwHighDateTime=0x1d5edef, ftLastAccessTime.dwLowDateTime=0xbc841c30, ftLastAccessTime.dwHighDateTime=0x1d5e349, ftLastWriteTime.dwLowDateTime=0xbc841c30, ftLastWriteTime.dwHighDateTime=0x1d5e349, nFileSizeHigh=0x0, nFileSizeLow=0x7791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y fy.wav", cAlternateFileName="YFY~1.WAV")) returned 1 [0096.983] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bdd0a0, ftCreationTime.dwHighDateTime=0x1d5ef53, ftLastAccessTime.dwLowDateTime=0xd6660c30, ftLastAccessTime.dwHighDateTime=0x1d5e3b7, ftLastWriteTime.dwLowDateTime=0xd6660c30, ftLastWriteTime.dwHighDateTime=0x1d5e3b7, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z1vT.mp4", cAlternateFileName="")) returned 1 [0096.983] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8e37d0, ftCreationTime.dwHighDateTime=0x1d5e2e3, ftLastAccessTime.dwLowDateTime=0x14807a0, ftLastAccessTime.dwHighDateTime=0x1d5e99e, ftLastWriteTime.dwLowDateTime=0x14807a0, ftLastWriteTime.dwHighDateTime=0x1d5e99e, nFileSizeHigh=0x0, nFileSizeLow=0xa2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZlZN.mp3", cAlternateFileName="")) returned 1 [0096.983] FindNextFileW (in: hFindFile=0x77da00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8e37d0, ftCreationTime.dwHighDateTime=0x1d5e2e3, ftLastAccessTime.dwLowDateTime=0x14807a0, ftLastAccessTime.dwHighDateTime=0x1d5e99e, ftLastWriteTime.dwLowDateTime=0x14807a0, ftLastWriteTime.dwHighDateTime=0x1d5e99e, nFileSizeHigh=0x0, nFileSizeLow=0xa2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZlZN.mp3", cAlternateFileName="")) returned 0 [0096.983] FindClose (in: hFindFile=0x77da00 | out: hFindFile=0x77da00) returned 1 [0096.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0096.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0097.171] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png", lpFilePart=0x0) returned 0x24 [0097.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0097.171] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png" (normalized: "c:\\users\\fd1hvy\\desktop\\0ana0vzk.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x350 [0097.172] GetFileType (hFile=0x350) returned 0x1 [0097.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0097.173] GetFileType (hFile=0x350) returned 0x1 [0097.173] GetFileSize (in: hFile=0x350, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x1060a [0097.175] ReadFile (in: hFile=0x350, lpBuffer=0x23ccd4c, nNumberOfBytesToRead=0x1060a, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x23ccd4c*, lpNumberOfBytesRead=0x4fe7ec*=0x1060a, lpOverlapped=0x0) returned 1 [0097.232] CloseHandle (hObject=0x350) returned 1 [0110.761] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x4fe194, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0110.762] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x4fe1f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0110.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6ac) returned 1 [0110.763] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x4fe728 | out: lpFileInformation=0x4fe728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0110.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6a8) returned 1 [0111.140] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x4fe604 | out: pfEnabled=0x4fe604) returned 0x0 [0111.830] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0111.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0111.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0111.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0111.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png", lpFilePart=0x0) returned 0x24 [0111.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0111.832] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png" (normalized: "c:\\users\\fd1hvy\\desktop\\0ana0vzk.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0111.833] GetFileType (hFile=0x404) returned 0x1 [0111.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0111.834] GetFileType (hFile=0x404) returned 0x1 [0111.834] WriteFile (in: hFile=0x404, lpBuffer=0x2475174*, nNumberOfBytesToWrite=0x10610, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2475174*, lpNumberOfBytesWritten=0x4fe7e0*=0x10610, lpOverlapped=0x0) returned 1 [0111.837] CloseHandle (hObject=0x404) returned 1 [0111.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png", lpFilePart=0x0) returned 0x24 [0111.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png.klavins", lpFilePart=0x0) returned 0x2c [0111.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0111.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png" (normalized: "c:\\users\\fd1hvy\\desktop\\0ana0vzk.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263d9f80, ftCreationTime.dwHighDateTime=0x1d5e853, ftLastAccessTime.dwLowDateTime=0xa876c1d0, ftLastAccessTime.dwHighDateTime=0x1d5eec9, ftLastWriteTime.dwLowDateTime=0x84c016f1, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10610)) returned 1 [0111.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0111.842] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png" (normalized: "c:\\users\\fd1hvy\\desktop\\0ana0vzk.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\0AnA0vZk.png.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\0ana0vzk.png.klavins")) returned 1 [0111.844] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg", lpFilePart=0x0) returned 0x22 [0111.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0111.844] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\1t8mdr.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0111.844] GetFileType (hFile=0x404) returned 0x1 [0111.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0111.844] GetFileType (hFile=0x404) returned 0x1 [0111.844] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x9299 [0111.845] ReadFile (in: hFile=0x404, lpBuffer=0x2485ba4, nNumberOfBytesToRead=0x9299, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2485ba4*, lpNumberOfBytesRead=0x4fe7ec*=0x9299, lpOverlapped=0x0) returned 1 [0111.847] CloseHandle (hObject=0x404) returned 1 [0112.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg", lpFilePart=0x0) returned 0x22 [0112.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.035] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\1t8mdr.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.037] GetFileType (hFile=0x404) returned 0x1 [0112.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.037] GetFileType (hFile=0x404) returned 0x1 [0112.037] WriteFile (in: hFile=0x404, lpBuffer=0x25006b0*, nNumberOfBytesToWrite=0x92a0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x25006b0*, lpNumberOfBytesWritten=0x4fe7e0*=0x92a0, lpOverlapped=0x0) returned 1 [0112.039] CloseHandle (hObject=0x404) returned 1 [0112.044] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg", lpFilePart=0x0) returned 0x22 [0112.045] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg.klavins", lpFilePart=0x0) returned 0x2a [0112.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\1t8mdr.jpg"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2207d2a0, ftCreationTime.dwHighDateTime=0x1d5e240, ftLastAccessTime.dwLowDateTime=0xef59ebb0, ftLastAccessTime.dwHighDateTime=0x1d5e6e3, ftLastWriteTime.dwLowDateTime=0x84df168e, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x92a0)) returned 1 [0112.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.045] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\1t8mdr.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\1t8mDR.jpg.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\1t8mdr.jpg.klavins")) returned 1 [0112.046] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx", lpFilePart=0x0) returned 0x2e [0112.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.046] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\7wdyxjkcwk4g32psz.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.046] GetFileType (hFile=0x404) returned 0x1 [0112.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.046] GetFileType (hFile=0x404) returned 0x1 [0112.046] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x12196 [0112.048] ReadFile (in: hFile=0x404, lpBuffer=0x2509da4, nNumberOfBytesToRead=0x12196, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2509da4*, lpNumberOfBytesRead=0x4fe7ec*=0x12196, lpOverlapped=0x0) returned 1 [0112.051] CloseHandle (hObject=0x404) returned 1 [0112.142] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.143] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx", lpFilePart=0x0) returned 0x2e [0112.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.143] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\7wdyxjkcwk4g32psz.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.145] GetFileType (hFile=0x404) returned 0x1 [0112.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.145] GetFileType (hFile=0x404) returned 0x1 [0112.145] WriteFile (in: hFile=0x404, lpBuffer=0x23c5554*, nNumberOfBytesToWrite=0x121a0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x23c5554*, lpNumberOfBytesWritten=0x4fe7e0*=0x121a0, lpOverlapped=0x0) returned 1 [0112.148] CloseHandle (hObject=0x404) returned 1 [0112.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx", lpFilePart=0x0) returned 0x2e [0112.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx.klavins", lpFilePart=0x0) returned 0x36 [0112.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\7wdyxjkcwk4g32psz.pptx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33603830, ftCreationTime.dwHighDateTime=0x1d5e11e, ftLastAccessTime.dwLowDateTime=0xb5b0a230, ftLastAccessTime.dwHighDateTime=0x1d5e6c7, ftLastWriteTime.dwLowDateTime=0x84efc5c3, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x121a0)) returned 1 [0112.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.157] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\7wdyxjkcwk4g32psz.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\7wdYXjKcwK4g32pSz.pptx.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\7wdyxjkcwk4g32psz.pptx.klavins")) returned 1 [0112.158] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx", lpFilePart=0x0) returned 0x2f [0112.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\arrxev3mman5zxl_hu.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.158] GetFileType (hFile=0x404) returned 0x1 [0112.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.158] GetFileType (hFile=0x404) returned 0x1 [0112.158] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xf43d [0112.158] ReadFile (in: hFile=0x404, lpBuffer=0x23d7bd8, nNumberOfBytesToRead=0xf43d, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x23d7bd8*, lpNumberOfBytesRead=0x4fe7ec*=0xf43d, lpOverlapped=0x0) returned 1 [0112.165] CloseHandle (hObject=0x404) returned 1 [0112.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx", lpFilePart=0x0) returned 0x2f [0112.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.266] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\arrxev3mman5zxl_hu.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.266] GetFileType (hFile=0x404) returned 0x1 [0112.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.266] GetFileType (hFile=0x404) returned 0x1 [0112.266] WriteFile (in: hFile=0x404, lpBuffer=0x24527f4*, nNumberOfBytesToWrite=0xf440, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x24527f4*, lpNumberOfBytesWritten=0x4fe7e0*=0xf440, lpOverlapped=0x0) returned 1 [0112.268] CloseHandle (hObject=0x404) returned 1 [0112.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx", lpFilePart=0x0) returned 0x2f [0112.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx.klavins", lpFilePart=0x0) returned 0x37 [0112.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\arrxev3mman5zxl_hu.pptx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc0f3e0, ftCreationTime.dwHighDateTime=0x1d5ef07, ftLastAccessTime.dwLowDateTime=0xa2b05e30, ftLastAccessTime.dwHighDateTime=0x1d5ef2a, ftLastWriteTime.dwLowDateTime=0x8502da30, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xf440)) returned 1 [0112.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.271] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\arrxev3mman5zxl_hu.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\ARRXev3Mman5ZXl_hU.pptx.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\arrxev3mman5zxl_hu.pptx.klavins")) returned 1 [0112.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv", lpFilePart=0x0) returned 0x23 [0112.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.284] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\dfkt340.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.284] GetFileType (hFile=0x404) returned 0x1 [0112.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.286] GetFileType (hFile=0x404) returned 0x1 [0112.286] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x1e79 [0112.286] ReadFile (in: hFile=0x404, lpBuffer=0x2462100, nNumberOfBytesToRead=0x1e79, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2462100*, lpNumberOfBytesRead=0x4fe7ec*=0x1e79, lpOverlapped=0x0) returned 1 [0112.287] CloseHandle (hObject=0x404) returned 1 [0112.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv", lpFilePart=0x0) returned 0x23 [0112.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.322] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\dfkt340.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.323] GetFileType (hFile=0x404) returned 0x1 [0112.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.324] GetFileType (hFile=0x404) returned 0x1 [0112.324] WriteFile (in: hFile=0x404, lpBuffer=0x24b876c*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x24b876c*, lpNumberOfBytesWritten=0x4fe7e0*=0x1e80, lpOverlapped=0x0) returned 1 [0112.325] CloseHandle (hObject=0x404) returned 1 [0112.326] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv", lpFilePart=0x0) returned 0x23 [0112.326] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv.klavins", lpFilePart=0x0) returned 0x2b [0112.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\dfkt340.csv"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaffb5960, ftCreationTime.dwHighDateTime=0x1d5e1f5, ftLastAccessTime.dwLowDateTime=0x3ad2cd0, ftLastAccessTime.dwHighDateTime=0x1d5e856, ftLastWriteTime.dwLowDateTime=0x8509ffe6, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x1e80)) returned 1 [0112.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.326] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\dfkt340.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\DfKt340.csv.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\dfkt340.csv.klavins")) returned 1 [0112.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png", lpFilePart=0x0) returned 0x2b [0112.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.327] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png" (normalized: "c:\\users\\fd1hvy\\desktop\\f2zph36bgvfl1y8.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.327] GetFileType (hFile=0x404) returned 0x1 [0112.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.327] GetFileType (hFile=0x404) returned 0x1 [0112.327] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x17603 [0112.328] ReadFile (in: hFile=0x404, lpBuffer=0x3405228, nNumberOfBytesToRead=0x17603, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x3405228*, lpNumberOfBytesRead=0x4fe7ec*=0x17603, lpOverlapped=0x0) returned 1 [0112.330] CloseHandle (hObject=0x404) returned 1 [0112.357] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png", lpFilePart=0x0) returned 0x2b [0112.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.358] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png" (normalized: "c:\\users\\fd1hvy\\desktop\\f2zph36bgvfl1y8.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.360] GetFileType (hFile=0x404) returned 0x1 [0112.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.360] GetFileType (hFile=0x404) returned 0x1 [0112.360] WriteFile (in: hFile=0x404, lpBuffer=0x347a0a8*, nNumberOfBytesToWrite=0x17610, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x347a0a8*, lpNumberOfBytesWritten=0x4fe7e0*=0x17610, lpOverlapped=0x0) returned 1 [0112.362] CloseHandle (hObject=0x404) returned 1 [0112.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png", lpFilePart=0x0) returned 0x2b [0112.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png.klavins", lpFilePart=0x0) returned 0x33 [0112.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png" (normalized: "c:\\users\\fd1hvy\\desktop\\f2zph36bgvfl1y8.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5456d90, ftCreationTime.dwHighDateTime=0x1d5ec2e, ftLastAccessTime.dwLowDateTime=0xc5246710, ftLastAccessTime.dwHighDateTime=0x1d5ef5a, ftLastWriteTime.dwLowDateTime=0x851126eb, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x17610)) returned 1 [0112.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.365] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png" (normalized: "c:\\users\\fd1hvy\\desktop\\f2zph36bgvfl1y8.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\F2Zph36bGvFL1Y8.png.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\f2zph36bgvfl1y8.png.klavins")) returned 1 [0112.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt", lpFilePart=0x0) returned 0x22 [0112.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.366] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\fqaxes.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.366] GetFileType (hFile=0x404) returned 0x1 [0112.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.366] GetFileType (hFile=0x404) returned 0x1 [0112.366] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x172ec [0112.367] ReadFile (in: hFile=0x404, lpBuffer=0x34916d8, nNumberOfBytesToRead=0x172ec, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x34916d8*, lpNumberOfBytesRead=0x4fe7ec*=0x172ec, lpOverlapped=0x0) returned 1 [0112.369] CloseHandle (hObject=0x404) returned 1 [0112.402] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt", lpFilePart=0x0) returned 0x22 [0112.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\fqaxes.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.404] GetFileType (hFile=0x404) returned 0x1 [0112.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.404] GetFileType (hFile=0x404) returned 0x1 [0112.404] WriteFile (in: hFile=0x404, lpBuffer=0x35055c0*, nNumberOfBytesToWrite=0x172f0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x35055c0*, lpNumberOfBytesWritten=0x4fe7e0*=0x172f0, lpOverlapped=0x0) returned 1 [0112.407] CloseHandle (hObject=0x404) returned 1 [0112.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt", lpFilePart=0x0) returned 0x22 [0112.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt.klavins", lpFilePart=0x0) returned 0x2a [0112.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\fqaxes.ppt"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395f49c0, ftCreationTime.dwHighDateTime=0x1d5ea5a, ftLastAccessTime.dwLowDateTime=0xed74e240, ftLastAccessTime.dwHighDateTime=0x1d5ed29, ftLastWriteTime.dwLowDateTime=0x851868f8, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x172f0)) returned 1 [0112.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.412] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\fqaxes.ppt"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\FQAxEs.ppt.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\fqaxes.ppt.klavins")) returned 1 [0112.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg", lpFilePart=0x0) returned 0x24 [0112.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.413] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\gj 5nbr8.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.413] GetFileType (hFile=0x404) returned 0x1 [0112.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.413] GetFileType (hFile=0x404) returned 0x1 [0112.413] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x79e1 [0112.413] ReadFile (in: hFile=0x404, lpBuffer=0x2554e8c, nNumberOfBytesToRead=0x79e1, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2554e8c*, lpNumberOfBytesRead=0x4fe7ec*=0x79e1, lpOverlapped=0x0) returned 1 [0112.414] CloseHandle (hObject=0x404) returned 1 [0112.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.452] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg", lpFilePart=0x0) returned 0x24 [0112.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.452] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\gj 5nbr8.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.453] GetFileType (hFile=0x404) returned 0x1 [0112.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.453] GetFileType (hFile=0x404) returned 0x1 [0112.454] WriteFile (in: hFile=0x404, lpBuffer=0x25c7e28*, nNumberOfBytesToWrite=0x79f0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x25c7e28*, lpNumberOfBytesWritten=0x4fe7e0*=0x79f0, lpOverlapped=0x0) returned 1 [0112.455] CloseHandle (hObject=0x404) returned 1 [0112.457] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg", lpFilePart=0x0) returned 0x24 [0112.458] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg.klavins", lpFilePart=0x0) returned 0x2c [0112.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\gj 5nbr8.jpg"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea6c40, ftCreationTime.dwHighDateTime=0x1d5e9fe, ftLastAccessTime.dwLowDateTime=0x4eef65e0, ftLastAccessTime.dwHighDateTime=0x1d5ecb7, ftLastWriteTime.dwLowDateTime=0x851f9910, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x79f0)) returned 1 [0112.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.458] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\gj 5nbr8.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\GJ 5nBR8.jpg.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\gj 5nbr8.jpg.klavins")) returned 1 [0112.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3", lpFilePart=0x0) returned 0x30 [0112.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.459] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\h 8yjoiieqzdgeyjpirv.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.459] GetFileType (hFile=0x404) returned 0x1 [0112.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.459] GetFileType (hFile=0x404) returned 0x1 [0112.459] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xa320 [0112.461] ReadFile (in: hFile=0x404, lpBuffer=0x25cfc70, nNumberOfBytesToRead=0xa320, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x25cfc70*, lpNumberOfBytesRead=0x4fe7ec*=0xa320, lpOverlapped=0x0) returned 1 [0112.462] CloseHandle (hObject=0x404) returned 1 [0112.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3", lpFilePart=0x0) returned 0x30 [0112.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.514] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\h 8yjoiieqzdgeyjpirv.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.516] GetFileType (hFile=0x404) returned 0x1 [0112.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.516] GetFileType (hFile=0x404) returned 0x1 [0112.516] WriteFile (in: hFile=0x404, lpBuffer=0x264fa48*, nNumberOfBytesToWrite=0xa330, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x264fa48*, lpNumberOfBytesWritten=0x4fe7e0*=0xa330, lpOverlapped=0x0) returned 1 [0112.518] CloseHandle (hObject=0x404) returned 1 [0112.522] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3", lpFilePart=0x0) returned 0x30 [0112.522] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3.klavins", lpFilePart=0x0) returned 0x38 [0112.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\h 8yjoiieqzdgeyjpirv.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c20920, ftCreationTime.dwHighDateTime=0x1d5eeac, ftLastAccessTime.dwLowDateTime=0x869c6220, ftLastAccessTime.dwHighDateTime=0x1d5e90d, ftLastWriteTime.dwLowDateTime=0x8528fe77, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xa330)) returned 1 [0112.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.522] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\h 8yjoiieqzdgeyjpirv.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\h 8YJOiiEqZdgeYjPirv.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\h 8yjoiieqzdgeyjpirv.mp3.klavins")) returned 1 [0112.523] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi", lpFilePart=0x0) returned 0x2b [0112.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.523] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\hizawuh2j6satr-.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.524] GetFileType (hFile=0x404) returned 0x1 [0112.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.524] GetFileType (hFile=0x404) returned 0x1 [0112.524] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x17ae6 [0112.525] ReadFile (in: hFile=0x404, lpBuffer=0x351c8d0, nNumberOfBytesToRead=0x17ae6, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x351c8d0*, lpNumberOfBytesRead=0x4fe7ec*=0x17ae6, lpOverlapped=0x0) returned 1 [0112.528] CloseHandle (hObject=0x404) returned 1 [0112.584] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.584] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi", lpFilePart=0x0) returned 0x2b [0112.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.585] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\hizawuh2j6satr-.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.587] GetFileType (hFile=0x404) returned 0x1 [0112.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.587] GetFileType (hFile=0x404) returned 0x1 [0112.587] WriteFile (in: hFile=0x404, lpBuffer=0x3592fb8*, nNumberOfBytesToWrite=0x17af0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x3592fb8*, lpNumberOfBytesWritten=0x4fe7e0*=0x17af0, lpOverlapped=0x0) returned 1 [0112.590] CloseHandle (hObject=0x404) returned 1 [0112.598] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi", lpFilePart=0x0) returned 0x2b [0112.598] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi.klavins", lpFilePart=0x0) returned 0x33 [0112.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\hizawuh2j6satr-.avi"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe07393b0, ftCreationTime.dwHighDateTime=0x1d5edfc, ftLastAccessTime.dwLowDateTime=0x164b3390, ftLastAccessTime.dwHighDateTime=0x1d5ee4c, ftLastWriteTime.dwLowDateTime=0x85350222, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x17af0)) returned 1 [0112.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.598] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\hizawuh2j6satr-.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\hizAwUh2j6satr-.avi.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\hizawuh2j6satr-.avi.klavins")) returned 1 [0112.599] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp", lpFilePart=0x0) returned 0x2f [0112.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.600] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\itjyho8kshiaxf3s6dl.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.600] GetFileType (hFile=0x404) returned 0x1 [0112.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.600] GetFileType (hFile=0x404) returned 0x1 [0112.600] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xc896 [0112.602] ReadFile (in: hFile=0x404, lpBuffer=0x26a74b4, nNumberOfBytesToRead=0xc896, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x26a74b4*, lpNumberOfBytesRead=0x4fe7ec*=0xc896, lpOverlapped=0x0) returned 1 [0112.604] CloseHandle (hObject=0x404) returned 1 [0112.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp", lpFilePart=0x0) returned 0x2f [0112.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\itjyho8kshiaxf3s6dl.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.653] GetFileType (hFile=0x404) returned 0x1 [0112.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.653] GetFileType (hFile=0x404) returned 0x1 [0112.653] WriteFile (in: hFile=0x404, lpBuffer=0x2719c94*, nNumberOfBytesToWrite=0xc8a0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2719c94*, lpNumberOfBytesWritten=0x4fe7e0*=0xc8a0, lpOverlapped=0x0) returned 1 [0112.655] CloseHandle (hObject=0x404) returned 1 [0112.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp", lpFilePart=0x0) returned 0x2f [0112.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp.klavins", lpFilePart=0x0) returned 0x37 [0112.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\itjyho8kshiaxf3s6dl.bmp"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9e3630, ftCreationTime.dwHighDateTime=0x1d5e3fa, ftLastAccessTime.dwLowDateTime=0x23695ba0, ftLastAccessTime.dwHighDateTime=0x1d5e286, ftLastWriteTime.dwLowDateTime=0x853c11ff, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xc8a0)) returned 1 [0112.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.658] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\itjyho8kshiaxf3s6dl.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\ITjYho8KshiaXF3s6dL.bmp.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\itjyho8kshiaxf3s6dl.bmp.klavins")) returned 1 [0112.661] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4", lpFilePart=0x0) returned 0x24 [0112.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\iutzqs5o.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.661] GetFileType (hFile=0x404) returned 0x1 [0112.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.662] GetFileType (hFile=0x404) returned 0x1 [0112.662] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x10b1f [0112.664] ReadFile (in: hFile=0x404, lpBuffer=0x27269c0, nNumberOfBytesToRead=0x10b1f, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x27269c0*, lpNumberOfBytesRead=0x4fe7ec*=0x10b1f, lpOverlapped=0x0) returned 1 [0112.665] CloseHandle (hObject=0x404) returned 1 [0112.719] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.720] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4", lpFilePart=0x0) returned 0x24 [0112.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.720] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\iutzqs5o.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.721] GetFileType (hFile=0x404) returned 0x1 [0112.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.722] GetFileType (hFile=0x404) returned 0x1 [0112.722] WriteFile (in: hFile=0x404, lpBuffer=0x27a5920*, nNumberOfBytesToWrite=0x10b20, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x27a5920*, lpNumberOfBytesWritten=0x4fe7e0*=0x10b20, lpOverlapped=0x0) returned 1 [0112.776] CloseHandle (hObject=0x404) returned 1 [0112.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4", lpFilePart=0x0) returned 0x24 [0112.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4.klavins", lpFilePart=0x0) returned 0x2c [0112.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\iutzqs5o.mp4"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd1b2430, ftCreationTime.dwHighDateTime=0x1d5e526, ftLastAccessTime.dwLowDateTime=0x497dbe0, ftLastAccessTime.dwHighDateTime=0x1d5eb80, ftLastWriteTime.dwLowDateTime=0x854f244b, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10b20)) returned 1 [0112.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.780] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\iutzqs5o.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\IutzQs5O.mp4.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\iutzqs5o.mp4.klavins")) returned 1 [0112.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4", lpFilePart=0x0) returned 0x27 [0112.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.782] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\izygamblee1.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.782] GetFileType (hFile=0x404) returned 0x1 [0112.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.782] GetFileType (hFile=0x404) returned 0x1 [0112.782] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x2794 [0112.783] ReadFile (in: hFile=0x404, lpBuffer=0x27b6888, nNumberOfBytesToRead=0x2794, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x27b6888*, lpNumberOfBytesRead=0x4fe7ec*=0x2794, lpOverlapped=0x0) returned 1 [0112.784] CloseHandle (hObject=0x404) returned 1 [0112.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4", lpFilePart=0x0) returned 0x27 [0112.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.838] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\izygamblee1.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.839] GetFileType (hFile=0x404) returned 0x1 [0112.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.839] GetFileType (hFile=0x404) returned 0x1 [0112.839] WriteFile (in: hFile=0x404, lpBuffer=0x280fc90*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x280fc90*, lpNumberOfBytesWritten=0x4fe7e0*=0x27a0, lpOverlapped=0x0) returned 1 [0112.841] CloseHandle (hObject=0x404) returned 1 [0112.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4", lpFilePart=0x0) returned 0x27 [0112.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4.klavins", lpFilePart=0x0) returned 0x2f [0112.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\izygamblee1.mp4"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae56edb0, ftCreationTime.dwHighDateTime=0x1d5e883, ftLastAccessTime.dwLowDateTime=0x3a57b450, ftLastAccessTime.dwHighDateTime=0x1d5e2d7, ftLastWriteTime.dwLowDateTime=0x8558ae3d, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x27a0)) returned 1 [0112.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.842] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\izygamblee1.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\izYGAmbLee1.mp4.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\izygamblee1.mp4.klavins")) returned 1 [0112.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx", lpFilePart=0x0) returned 0x2e [0112.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\j0g1e j1dj6jpyrw2.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.844] GetFileType (hFile=0x404) returned 0x1 [0112.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.844] GetFileType (hFile=0x404) returned 0x1 [0112.844] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x411c [0112.844] ReadFile (in: hFile=0x404, lpBuffer=0x2812894, nNumberOfBytesToRead=0x411c, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2812894*, lpNumberOfBytesRead=0x4fe7ec*=0x411c, lpOverlapped=0x0) returned 1 [0112.845] CloseHandle (hObject=0x404) returned 1 [0112.886] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.886] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx", lpFilePart=0x0) returned 0x2e [0112.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\j0g1e j1dj6jpyrw2.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.888] GetFileType (hFile=0x404) returned 0x1 [0112.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.888] GetFileType (hFile=0x404) returned 0x1 [0112.888] WriteFile (in: hFile=0x404, lpBuffer=0x2873c1c*, nNumberOfBytesToWrite=0x4120, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2873c1c*, lpNumberOfBytesWritten=0x4fe7e0*=0x4120, lpOverlapped=0x0) returned 1 [0112.889] CloseHandle (hObject=0x404) returned 1 [0112.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx", lpFilePart=0x0) returned 0x2e [0112.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx.klavins", lpFilePart=0x0) returned 0x36 [0112.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\j0g1e j1dj6jpyrw2.docx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eaf2170, ftCreationTime.dwHighDateTime=0x1d5eba6, ftLastAccessTime.dwLowDateTime=0x913a9d30, ftLastAccessTime.dwHighDateTime=0x1d5e536, ftLastWriteTime.dwLowDateTime=0x855fd91c, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x4120)) returned 1 [0112.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.891] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\j0g1e j1dj6jpyrw2.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\j0g1E J1dJ6jpYrw2.docx.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\j0g1e j1dj6jpyrw2.docx.klavins")) returned 1 [0112.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3", lpFilePart=0x0) returned 0x30 [0112.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.892] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\nerinvzvqppvy5jmddif.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.892] GetFileType (hFile=0x404) returned 0x1 [0112.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.892] GetFileType (hFile=0x404) returned 0x1 [0112.893] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x10c79 [0112.895] ReadFile (in: hFile=0x404, lpBuffer=0x2878228, nNumberOfBytesToRead=0x10c79, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2878228*, lpNumberOfBytesRead=0x4fe7ec*=0x10c79, lpOverlapped=0x0) returned 1 [0112.896] CloseHandle (hObject=0x404) returned 1 [0112.952] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0112.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0112.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0112.953] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3", lpFilePart=0x0) returned 0x30 [0112.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0112.953] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\nerinvzvqppvy5jmddif.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.955] GetFileType (hFile=0x404) returned 0x1 [0112.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0112.955] GetFileType (hFile=0x404) returned 0x1 [0112.955] WriteFile (in: hFile=0x404, lpBuffer=0x28f75a8*, nNumberOfBytesToWrite=0x10c80, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x28f75a8*, lpNumberOfBytesWritten=0x4fe7e0*=0x10c80, lpOverlapped=0x0) returned 1 [0112.958] CloseHandle (hObject=0x404) returned 1 [0112.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3", lpFilePart=0x0) returned 0x30 [0112.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3.klavins", lpFilePart=0x0) returned 0x38 [0112.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0112.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\nerinvzvqppvy5jmddif.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758848b0, ftCreationTime.dwHighDateTime=0x1d5ee39, ftLastAccessTime.dwLowDateTime=0x1a4a5b70, ftLastAccessTime.dwHighDateTime=0x1d5e3c9, ftLastWriteTime.dwLowDateTime=0x856bbf60, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10c80)) returned 1 [0112.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0112.961] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\nerinvzvqppvy5jmddif.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\nerINvzvqPpVy5jmdDIF.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\nerinvzvqppvy5jmddif.mp3.klavins")) returned 1 [0112.962] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png", lpFilePart=0x0) returned 0x2d [0112.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0112.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png" (normalized: "c:\\users\\fd1hvy\\desktop\\p7a19tlepobempq3t.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0112.963] GetFileType (hFile=0x404) returned 0x1 [0112.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0112.963] GetFileType (hFile=0x404) returned 0x1 [0112.963] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x1def [0112.963] ReadFile (in: hFile=0x404, lpBuffer=0x2908700, nNumberOfBytesToRead=0x1def, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2908700*, lpNumberOfBytesRead=0x4fe7ec*=0x1def, lpOverlapped=0x0) returned 1 [0112.964] CloseHandle (hObject=0x404) returned 1 [0113.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png", lpFilePart=0x0) returned 0x2d [0113.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.050] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png" (normalized: "c:\\users\\fd1hvy\\desktop\\p7a19tlepobempq3t.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.051] GetFileType (hFile=0x404) returned 0x1 [0113.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.052] GetFileType (hFile=0x404) returned 0x1 [0113.052] WriteFile (in: hFile=0x404, lpBuffer=0x2413910*, nNumberOfBytesToWrite=0x1df0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2413910*, lpNumberOfBytesWritten=0x4fe7e0*=0x1df0, lpOverlapped=0x0) returned 1 [0113.053] CloseHandle (hObject=0x404) returned 1 [0113.053] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png", lpFilePart=0x0) returned 0x2d [0113.053] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png.klavins", lpFilePart=0x0) returned 0x35 [0113.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png" (normalized: "c:\\users\\fd1hvy\\desktop\\p7a19tlepobempq3t.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa973db60, ftCreationTime.dwHighDateTime=0x1d5ee59, ftLastAccessTime.dwLowDateTime=0xf5c52b40, ftLastAccessTime.dwHighDateTime=0x1d5e2e7, ftLastWriteTime.dwLowDateTime=0x857a0f8b, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x1df0)) returned 1 [0113.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.054] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png" (normalized: "c:\\users\\fd1hvy\\desktop\\p7a19tlepobempq3t.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\P7a19TlEPOBemPq3t.png.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\p7a19tlepobempq3t.png.klavins")) returned 1 [0113.054] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png", lpFilePart=0x0) returned 0x24 [0113.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.054] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png" (normalized: "c:\\users\\fd1hvy\\desktop\\pbpvoyev.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.055] GetFileType (hFile=0x404) returned 0x1 [0113.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.055] GetFileType (hFile=0x404) returned 0x1 [0113.055] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x1016 [0113.055] ReadFile (in: hFile=0x404, lpBuffer=0x2415b78, nNumberOfBytesToRead=0x1016, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2415b78*, lpNumberOfBytesRead=0x4fe7ec*=0x1016, lpOverlapped=0x0) returned 1 [0113.056] CloseHandle (hObject=0x404) returned 1 [0113.080] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png", lpFilePart=0x0) returned 0x24 [0113.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.081] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png" (normalized: "c:\\users\\fd1hvy\\desktop\\pbpvoyev.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.083] GetFileType (hFile=0x404) returned 0x1 [0113.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.083] GetFileType (hFile=0x404) returned 0x1 [0113.083] WriteFile (in: hFile=0x404, lpBuffer=0x2467b60*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2467b60*, lpNumberOfBytesWritten=0x4fe7e0*=0x1020, lpOverlapped=0x0) returned 1 [0113.084] CloseHandle (hObject=0x404) returned 1 [0113.085] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png", lpFilePart=0x0) returned 0x24 [0113.085] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png.klavins", lpFilePart=0x0) returned 0x2c [0113.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png" (normalized: "c:\\users\\fd1hvy\\desktop\\pbpvoyev.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d018500, ftCreationTime.dwHighDateTime=0x1d5e8d3, ftLastAccessTime.dwLowDateTime=0x5909cbd0, ftLastAccessTime.dwHighDateTime=0x1d5e30a, ftLastWriteTime.dwLowDateTime=0x857f1417, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x1020)) returned 1 [0113.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.086] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png" (normalized: "c:\\users\\fd1hvy\\desktop\\pbpvoyev.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\pBpvOyev.png.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\pbpvoyev.png.klavins")) returned 1 [0113.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3", lpFilePart=0x0) returned 0x2f [0113.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.086] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\rjyw0fbqm2yxvbd_jfl.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.087] GetFileType (hFile=0x404) returned 0x1 [0113.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.087] GetFileType (hFile=0x404) returned 0x1 [0113.087] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x35d9 [0113.087] ReadFile (in: hFile=0x404, lpBuffer=0x2468fe8, nNumberOfBytesToRead=0x35d9, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2468fe8*, lpNumberOfBytesRead=0x4fe7ec*=0x35d9, lpOverlapped=0x0) returned 1 [0113.088] CloseHandle (hObject=0x404) returned 1 [0113.111] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.111] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3", lpFilePart=0x0) returned 0x2f [0113.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.112] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\rjyw0fbqm2yxvbd_jfl.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.128] GetFileType (hFile=0x404) returned 0x1 [0113.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.128] GetFileType (hFile=0x404) returned 0x1 [0113.128] WriteFile (in: hFile=0x404, lpBuffer=0x24c6b34*, nNumberOfBytesToWrite=0x35e0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x24c6b34*, lpNumberOfBytesWritten=0x4fe7e0*=0x35e0, lpOverlapped=0x0) returned 1 [0113.130] CloseHandle (hObject=0x404) returned 1 [0113.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3", lpFilePart=0x0) returned 0x2f [0113.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3.klavins", lpFilePart=0x0) returned 0x37 [0113.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\rjyw0fbqm2yxvbd_jfl.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2657e80, ftCreationTime.dwHighDateTime=0x1d5e7ef, ftLastAccessTime.dwLowDateTime=0x385a43c0, ftLastAccessTime.dwHighDateTime=0x1d5ecf5, ftLastWriteTime.dwLowDateTime=0x8585faa5, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x35e0)) returned 1 [0113.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.132] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\rjyw0fbqm2yxvbd_jfl.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\RJyw0fBQM2YxvBD_Jfl.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\desktop\\rjyw0fbqm2yxvbd_jfl.mp3.klavins")) returned 1 [0113.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", lpFilePart=0x0) returned 0x2d [0113.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\software-launcher.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.133] GetFileType (hFile=0x404) returned 0x1 [0113.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.133] GetFileType (hFile=0x404) returned 0x1 [0113.133] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x33e00 [0113.134] ReadFile (in: hFile=0x404, lpBuffer=0x3606b48, nNumberOfBytesToRead=0x33e00, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x3606b48*, lpNumberOfBytesRead=0x4fe7ec*=0x33e00, lpOverlapped=0x0) returned 1 [0113.139] CloseHandle (hObject=0x404) returned 1 [0113.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", lpFilePart=0x0) returned 0x2d [0113.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.179] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\software-launcher.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fcad0) returned 1 [0113.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0113.201] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links", lpFilePart=0x0) returned 0x15 [0113.201] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb110 [0113.201] FindNextFileW (in: hFindFile=0x7eb110, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.202] FindNextFileW (in: hFindFile=0x7eb110, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0113.202] FindNextFileW (in: hFindFile=0x7eb110, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0113.202] FindNextFileW (in: hFindFile=0x7eb110, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0113.203] FindNextFileW (in: hFindFile=0x7eb110, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0113.203] FindNextFileW (in: hFindFile=0x7eb110, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.203] FindClose (in: hFindFile=0x7eb110 | out: hFindFile=0x7eb110) returned 1 [0113.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0113.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0113.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0113.203] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links", lpFilePart=0x0) returned 0x15 [0113.203] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eae90 [0113.203] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.204] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0113.204] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0113.204] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0113.204] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0113.204] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 0 [0113.204] FindClose (in: hFindFile=0x7eae90 | out: hFindFile=0x7eae90) returned 1 [0113.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0113.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0113.205] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x21 [0113.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.205] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.206] GetFileType (hFile=0x404) returned 0x1 [0113.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.206] GetFileType (hFile=0x404) returned 0x1 [0113.206] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x1f5 [0113.206] ReadFile (in: hFile=0x404, lpBuffer=0x23b69e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x23b69e0*, lpNumberOfBytesRead=0x4fe7ec*=0x1f5, lpOverlapped=0x0) returned 1 [0113.207] CloseHandle (hObject=0x404) returned 1 [0113.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x21 [0113.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.266] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.267] GetFileType (hFile=0x404) returned 0x1 [0113.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.267] GetFileType (hFile=0x404) returned 0x1 [0113.268] WriteFile (in: hFile=0x404, lpBuffer=0x2405530*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x4fe7b4, lpOverlapped=0x0 | out: lpBuffer=0x2405530*, lpNumberOfBytesWritten=0x4fe7b4*=0x200, lpOverlapped=0x0) returned 1 [0113.268] CloseHandle (hObject=0x404) returned 1 [0113.295] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Desktop.lnk", lpFilePart=0x0) returned 0x21 [0113.295] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Desktop.lnk.klavins", lpFilePart=0x0) returned 0x29 [0113.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x859dd0c8, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0113.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.295] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\Desktop.lnk.klavins" (normalized: "c:\\users\\fd1hvy\\links\\desktop.lnk.klavins")) returned 1 [0113.296] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x23 [0113.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.296] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.296] GetFileType (hFile=0x404) returned 0x1 [0113.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.296] GetFileType (hFile=0x404) returned 0x1 [0113.296] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x3ae [0113.297] ReadFile (in: hFile=0x404, lpBuffer=0x2406af8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2406af8*, lpNumberOfBytesRead=0x4fe7ec*=0x3ae, lpOverlapped=0x0) returned 1 [0113.328] CloseHandle (hObject=0x404) returned 1 [0113.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x23 [0113.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.347] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.349] GetFileType (hFile=0x404) returned 0x1 [0113.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.349] GetFileType (hFile=0x404) returned 0x1 [0113.349] WriteFile (in: hFile=0x404, lpBuffer=0x2455d5c*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x4fe7b4, lpOverlapped=0x0 | out: lpBuffer=0x2455d5c*, lpNumberOfBytesWritten=0x4fe7b4*=0x3b0, lpOverlapped=0x0) returned 1 [0113.350] CloseHandle (hObject=0x404) returned 1 [0113.351] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Downloads.lnk", lpFilePart=0x0) returned 0x23 [0113.351] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\Downloads.lnk.klavins", lpFilePart=0x0) returned 0x2b [0113.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x85a75a58, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0113.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.351] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\Downloads.lnk.klavins" (normalized: "c:\\users\\fd1hvy\\links\\downloads.lnk.klavins")) returned 1 [0113.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", lpFilePart=0x0) returned 0x22 [0113.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.352] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.356] GetFileType (hFile=0x404) returned 0x1 [0113.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.356] GetFileType (hFile=0x404) returned 0x1 [0113.356] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x53a [0113.356] ReadFile (in: hFile=0x404, lpBuffer=0x24574bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x24574bc*, lpNumberOfBytesRead=0x4fe7ec*=0x53a, lpOverlapped=0x0) returned 1 [0113.358] CloseHandle (hObject=0x404) returned 1 [0113.378] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", lpFilePart=0x0) returned 0x22 [0113.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.379] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.380] GetFileType (hFile=0x404) returned 0x1 [0113.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.380] GetFileType (hFile=0x404) returned 0x1 [0113.381] WriteFile (in: hFile=0x404, lpBuffer=0x24a6ef4*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x4fe7b4, lpOverlapped=0x0 | out: lpBuffer=0x24a6ef4*, lpNumberOfBytesWritten=0x4fe7b4*=0x540, lpOverlapped=0x0) returned 1 [0113.382] CloseHandle (hObject=0x404) returned 1 [0113.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk", lpFilePart=0x0) returned 0x22 [0113.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk.klavins", lpFilePart=0x0) returned 0x2a [0113.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x85ac2062, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0113.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.383] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk"), lpNewFileName="C:\\Users\\FD1HVy\\Links\\OneDrive.lnk.klavins" (normalized: "c:\\users\\fd1hvy\\links\\onedrive.lnk.klavins")) returned 1 [0113.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0113.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Contacts", lpFilePart=0x0) returned 0x18 [0113.385] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb490 [0113.386] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.386] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0113.386] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.386] FindClose (in: hFindFile=0x7eb490 | out: hFindFile=0x7eb490) returned 1 [0113.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0113.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0113.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0113.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Contacts", lpFilePart=0x0) returned 0x18 [0113.387] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb490 [0113.387] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.387] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0113.387] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0113.387] FindClose (in: hFindFile=0x7eb490 | out: hFindFile=0x7eb490) returned 1 [0113.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0113.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0113.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0113.387] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0113.387] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x8585faa5, ftLastAccessTime.dwHighDateTime=0x1d6811a, ftLastWriteTime.dwLowDateTime=0x8585faa5, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb090 [0113.388] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x8585faa5, ftLastAccessTime.dwHighDateTime=0x1d6811a, ftLastWriteTime.dwLowDateTime=0x8585faa5, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.388] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263d9f80, ftCreationTime.dwHighDateTime=0x1d5e853, ftLastAccessTime.dwLowDateTime=0xa876c1d0, ftLastAccessTime.dwHighDateTime=0x1d5eec9, ftLastWriteTime.dwLowDateTime=0x84c016f1, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10610, dwReserved0=0x0, dwReserved1=0x0, cFileName="0AnA0vZk.png.klavins", cAlternateFileName="0ANA0V~1.KLA")) returned 1 [0113.388] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2207d2a0, ftCreationTime.dwHighDateTime=0x1d5e240, ftLastAccessTime.dwLowDateTime=0xef59ebb0, ftLastAccessTime.dwHighDateTime=0x1d5e6e3, ftLastWriteTime.dwLowDateTime=0x84df168e, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x92a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1t8mDR.jpg.klavins", cAlternateFileName="1T8MDR~1.KLA")) returned 1 [0113.388] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db178f0, ftCreationTime.dwHighDateTime=0x1d5e542, ftLastAccessTime.dwLowDateTime=0xafdddc00, ftLastAccessTime.dwHighDateTime=0x1d5e637, ftLastWriteTime.dwLowDateTime=0xafdddc00, ftLastWriteTime.dwHighDateTime=0x1d5e637, nFileSizeHigh=0x0, nFileSizeLow=0x1381d, dwReserved0=0x0, dwReserved1=0x0, cFileName="5nnvD0SnI8rgfUNd.ots", cAlternateFileName="5NNVD0~1.OTS")) returned 1 [0113.388] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33603830, ftCreationTime.dwHighDateTime=0x1d5e11e, ftLastAccessTime.dwLowDateTime=0xb5b0a230, ftLastAccessTime.dwHighDateTime=0x1d5e6c7, ftLastWriteTime.dwLowDateTime=0x84efc5c3, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7wdYXjKcwK4g32pSz.pptx.klavins", cAlternateFileName="7WDYXJ~1.KLA")) returned 1 [0113.388] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a10d140, ftCreationTime.dwHighDateTime=0x1d5ee51, ftLastAccessTime.dwLowDateTime=0x67c689c0, ftLastAccessTime.dwHighDateTime=0x1d5ec6e, ftLastWriteTime.dwLowDateTime=0x67c689c0, ftLastWriteTime.dwHighDateTime=0x1d5ec6e, nFileSizeHigh=0x0, nFileSizeLow=0x70e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7Y_nAekfhaFT.ots", cAlternateFileName="7Y_NAE~1.OTS")) returned 1 [0113.389] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d737440, ftCreationTime.dwHighDateTime=0x1d5e27e, ftLastAccessTime.dwLowDateTime=0x6acde4e0, ftLastAccessTime.dwHighDateTime=0x1d5ec43, ftLastWriteTime.dwLowDateTime=0x6acde4e0, ftLastWriteTime.dwHighDateTime=0x1d5ec43, nFileSizeHigh=0x0, nFileSizeLow=0x15e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dcH4og.wav", cAlternateFileName="")) returned 1 [0113.389] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc0f3e0, ftCreationTime.dwHighDateTime=0x1d5ef07, ftLastAccessTime.dwLowDateTime=0xa2b05e30, ftLastAccessTime.dwHighDateTime=0x1d5ef2a, ftLastWriteTime.dwLowDateTime=0x8502da30, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xf440, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARRXev3Mman5ZXl_hU.pptx.klavins", cAlternateFileName="ARRXEV~1.KLA")) returned 1 [0113.389] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd54e650, ftCreationTime.dwHighDateTime=0x1d5e752, ftLastAccessTime.dwLowDateTime=0x56e0c730, ftLastAccessTime.dwHighDateTime=0x1d5eec4, ftLastWriteTime.dwLowDateTime=0x56e0c730, ftLastWriteTime.dwHighDateTime=0x1d5eec4, nFileSizeHigh=0x0, nFileSizeLow=0x895a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ax8TviU3D2R.ots", cAlternateFileName="AX8TVI~1.OTS")) returned 1 [0113.389] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c13ea0, ftCreationTime.dwHighDateTime=0x1d5e81e, ftLastAccessTime.dwLowDateTime=0xe3556050, ftLastAccessTime.dwHighDateTime=0x1d5e83d, ftLastWriteTime.dwLowDateTime=0xe3556050, ftLastWriteTime.dwHighDateTime=0x1d5e83d, nFileSizeHigh=0x0, nFileSizeLow=0x2171, dwReserved0=0x0, dwReserved1=0x0, cFileName="cXBjfxBR_NO6MB4LO.swf", cAlternateFileName="CXBJFX~1.SWF")) returned 1 [0113.389] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0113.389] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaffb5960, ftCreationTime.dwHighDateTime=0x1d5e1f5, ftLastAccessTime.dwLowDateTime=0x3ad2cd0, ftLastAccessTime.dwHighDateTime=0x1d5e856, ftLastWriteTime.dwLowDateTime=0x8509ffe6, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x1e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="DfKt340.csv.klavins", cAlternateFileName="DFKT34~1.KLA")) returned 1 [0113.389] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870aa1e0, ftCreationTime.dwHighDateTime=0x1d5ea4d, ftLastAccessTime.dwLowDateTime=0x591dcb30, ftLastAccessTime.dwHighDateTime=0x1d5e7fb, ftLastWriteTime.dwLowDateTime=0x591dcb30, ftLastWriteTime.dwHighDateTime=0x1d5e7fb, nFileSizeHigh=0x0, nFileSizeLow=0x1631f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eB_j_8aijU.swf", cAlternateFileName="EB_J_8~1.SWF")) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5456d90, ftCreationTime.dwHighDateTime=0x1d5ec2e, ftLastAccessTime.dwLowDateTime=0xc5246710, ftLastAccessTime.dwHighDateTime=0x1d5ef5a, ftLastWriteTime.dwLowDateTime=0x851126eb, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x17610, dwReserved0=0x0, dwReserved1=0x0, cFileName="F2Zph36bGvFL1Y8.png.klavins", cAlternateFileName="F2ZPH3~1.KLA")) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395f49c0, ftCreationTime.dwHighDateTime=0x1d5ea5a, ftLastAccessTime.dwLowDateTime=0xed74e240, ftLastAccessTime.dwHighDateTime=0x1d5ed29, ftLastWriteTime.dwLowDateTime=0x851868f8, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x172f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FQAxEs.ppt.klavins", cAlternateFileName="FQAXES~1.KLA")) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea6c40, ftCreationTime.dwHighDateTime=0x1d5e9fe, ftLastAccessTime.dwLowDateTime=0x4eef65e0, ftLastAccessTime.dwHighDateTime=0x1d5ecb7, ftLastWriteTime.dwLowDateTime=0x851f9910, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x79f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GJ 5nBR8.jpg.klavins", cAlternateFileName="GJ5NBR~1.KLA")) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c20920, ftCreationTime.dwHighDateTime=0x1d5eeac, ftLastAccessTime.dwLowDateTime=0x869c6220, ftLastAccessTime.dwHighDateTime=0x1d5e90d, ftLastWriteTime.dwLowDateTime=0x8528fe77, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xa330, dwReserved0=0x0, dwReserved1=0x0, cFileName="h 8YJOiiEqZdgeYjPirv.mp3.klavins", cAlternateFileName="H8YJOI~1.KLA")) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe07393b0, ftCreationTime.dwHighDateTime=0x1d5edfc, ftLastAccessTime.dwLowDateTime=0x164b3390, ftLastAccessTime.dwHighDateTime=0x1d5ee4c, ftLastWriteTime.dwLowDateTime=0x85350222, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x17af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hizAwUh2j6satr-.avi.klavins", cAlternateFileName="HIZAWU~1.KLA")) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9e3630, ftCreationTime.dwHighDateTime=0x1d5e3fa, ftLastAccessTime.dwLowDateTime=0x23695ba0, ftLastAccessTime.dwHighDateTime=0x1d5e286, ftLastWriteTime.dwLowDateTime=0x853c11ff, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xc8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITjYho8KshiaXF3s6dL.bmp.klavins", cAlternateFileName="ITJYHO~1.KLA")) returned 1 [0113.390] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd1b2430, ftCreationTime.dwHighDateTime=0x1d5e526, ftLastAccessTime.dwLowDateTime=0x497dbe0, ftLastAccessTime.dwHighDateTime=0x1d5eb80, ftLastWriteTime.dwLowDateTime=0x854f244b, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="IutzQs5O.mp4.klavins", cAlternateFileName="IUTZQS~1.KLA")) returned 1 [0113.391] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b7cc600, ftCreationTime.dwHighDateTime=0x1d5f014, ftLastAccessTime.dwLowDateTime=0xf90228e0, ftLastAccessTime.dwHighDateTime=0x1d5e4cb, ftLastWriteTime.dwLowDateTime=0xf90228e0, ftLastWriteTime.dwHighDateTime=0x1d5e4cb, nFileSizeHigh=0x0, nFileSizeLow=0x11314, dwReserved0=0x0, dwReserved1=0x0, cFileName="izcDMK.flv", cAlternateFileName="")) returned 1 [0113.391] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae56edb0, ftCreationTime.dwHighDateTime=0x1d5e883, ftLastAccessTime.dwLowDateTime=0x3a57b450, ftLastAccessTime.dwHighDateTime=0x1d5e2d7, ftLastWriteTime.dwLowDateTime=0x8558ae3d, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="izYGAmbLee1.mp4.klavins", cAlternateFileName="IZYGAM~1.KLA")) returned 1 [0113.391] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eaf2170, ftCreationTime.dwHighDateTime=0x1d5eba6, ftLastAccessTime.dwLowDateTime=0x913a9d30, ftLastAccessTime.dwHighDateTime=0x1d5e536, ftLastWriteTime.dwLowDateTime=0x855fd91c, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x4120, dwReserved0=0x0, dwReserved1=0x0, cFileName="j0g1E J1dJ6jpYrw2.docx.klavins", cAlternateFileName="J0G1EJ~1.KLA")) returned 1 [0113.391] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc2020, ftCreationTime.dwHighDateTime=0x1d5e8fe, ftLastAccessTime.dwLowDateTime=0xab1c6880, ftLastAccessTime.dwHighDateTime=0x1d5e367, ftLastWriteTime.dwLowDateTime=0xab1c6880, ftLastWriteTime.dwHighDateTime=0x1d5e367, nFileSizeHigh=0x0, nFileSizeLow=0x904f, dwReserved0=0x0, dwReserved1=0x0, cFileName="kGaWr7NAi7bG74F9s.m4a", cAlternateFileName="KGAWR7~1.M4A")) returned 1 [0113.391] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d444100, ftCreationTime.dwHighDateTime=0x1d5ec0d, ftLastAccessTime.dwLowDateTime=0xf0b70420, ftLastAccessTime.dwHighDateTime=0x1d5e1d4, ftLastWriteTime.dwLowDateTime=0xf0b70420, ftLastWriteTime.dwHighDateTime=0x1d5e1d4, nFileSizeHigh=0x0, nFileSizeLow=0x1596e, dwReserved0=0x0, dwReserved1=0x0, cFileName="KmRnd.m4a", cAlternateFileName="")) returned 1 [0113.391] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758848b0, ftCreationTime.dwHighDateTime=0x1d5ee39, ftLastAccessTime.dwLowDateTime=0x1a4a5b70, ftLastAccessTime.dwHighDateTime=0x1d5e3c9, ftLastWriteTime.dwLowDateTime=0x856bbf60, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="nerINvzvqPpVy5jmdDIF.mp3.klavins", cAlternateFileName="NERINV~1.KLA")) returned 1 [0113.391] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c58500, ftCreationTime.dwHighDateTime=0x1d5eac7, ftLastAccessTime.dwLowDateTime=0x3637dbe0, ftLastAccessTime.dwHighDateTime=0x1d5e645, ftLastWriteTime.dwLowDateTime=0x3637dbe0, ftLastWriteTime.dwHighDateTime=0x1d5e645, nFileSizeHigh=0x0, nFileSizeLow=0x84ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="oiGY5u9ZB7j.m4a", cAlternateFileName="OIGY5U~1.M4A")) returned 1 [0113.392] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa973db60, ftCreationTime.dwHighDateTime=0x1d5ee59, ftLastAccessTime.dwLowDateTime=0xf5c52b40, ftLastAccessTime.dwHighDateTime=0x1d5e2e7, ftLastWriteTime.dwLowDateTime=0x857a0f8b, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x1df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7a19TlEPOBemPq3t.png.klavins", cAlternateFileName="P7A19T~1.KLA")) returned 1 [0113.392] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d018500, ftCreationTime.dwHighDateTime=0x1d5e8d3, ftLastAccessTime.dwLowDateTime=0x5909cbd0, ftLastAccessTime.dwHighDateTime=0x1d5e30a, ftLastWriteTime.dwLowDateTime=0x857f1417, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x1020, dwReserved0=0x0, dwReserved1=0x0, cFileName="pBpvOyev.png.klavins", cAlternateFileName="PBPVOY~1.KLA")) returned 1 [0113.392] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe375adb0, ftCreationTime.dwHighDateTime=0x1d5e4c8, ftLastAccessTime.dwLowDateTime=0x86cf6e20, ftLastAccessTime.dwHighDateTime=0x1d5e69e, ftLastWriteTime.dwLowDateTime=0x86cf6e20, ftLastWriteTime.dwHighDateTime=0x1d5e69e, nFileSizeHigh=0x0, nFileSizeLow=0x1911, dwReserved0=0x0, dwReserved1=0x0, cFileName="PQ7lQwDEv8H.wav", cAlternateFileName="PQ7LQW~1.WAV")) returned 1 [0113.392] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2657e80, ftCreationTime.dwHighDateTime=0x1d5e7ef, ftLastAccessTime.dwLowDateTime=0x385a43c0, ftLastAccessTime.dwHighDateTime=0x1d5ecf5, ftLastWriteTime.dwLowDateTime=0x8585faa5, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x35e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RJyw0fBQM2YxvBD_Jfl.mp3.klavins", cAlternateFileName="RJYW0F~1.KLA")) returned 1 [0113.392] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4160bd00, ftCreationTime.dwHighDateTime=0x1d6811a, ftLastAccessTime.dwLowDateTime=0x4160bd00, ftLastAccessTime.dwHighDateTime=0x1d6811a, ftLastWriteTime.dwLowDateTime=0x5b4bd100, ftLastWriteTime.dwHighDateTime=0x1d68115, nFileSizeHigh=0x0, nFileSizeLow=0x33e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="software-launcher.exe", cAlternateFileName="SOFTWA~1.EXE")) returned 1 [0113.392] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17c7880, ftCreationTime.dwHighDateTime=0x1d5ea28, ftLastAccessTime.dwLowDateTime=0xfab0fb90, ftLastAccessTime.dwHighDateTime=0x1d5e371, ftLastWriteTime.dwLowDateTime=0xfab0fb90, ftLastWriteTime.dwHighDateTime=0x1d5e371, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TeX H3fOkrDef9", cAlternateFileName="TEXH3F~1")) returned 1 [0113.392] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4df2060, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0x1373fa30, ftLastAccessTime.dwHighDateTime=0x1d5ecf8, ftLastWriteTime.dwLowDateTime=0x1373fa30, ftLastWriteTime.dwHighDateTime=0x1d5ecf8, nFileSizeHigh=0x0, nFileSizeLow=0x11032, dwReserved0=0x0, dwReserved1=0x0, cFileName="tk-9vhEXizzs.mp4", cAlternateFileName="TK-9VH~1.MP4")) returned 1 [0113.393] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1208fc0, ftCreationTime.dwHighDateTime=0x1d5ee14, ftLastAccessTime.dwLowDateTime=0x53038570, ftLastAccessTime.dwHighDateTime=0x1d5e74f, ftLastWriteTime.dwLowDateTime=0x53038570, ftLastWriteTime.dwHighDateTime=0x1d5e74f, nFileSizeHigh=0x0, nFileSizeLow=0x14edc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uysgQyc.ots", cAlternateFileName="")) returned 1 [0113.393] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dcb39f0, ftCreationTime.dwHighDateTime=0x1d5ed8f, ftLastAccessTime.dwLowDateTime=0x7f7a0520, ftLastAccessTime.dwHighDateTime=0x1d5ed99, ftLastWriteTime.dwLowDateTime=0x7f7a0520, ftLastWriteTime.dwHighDateTime=0x1d5ed99, nFileSizeHigh=0x0, nFileSizeLow=0x12d28, dwReserved0=0x0, dwReserved1=0x0, cFileName="vSCvR6QFBWxnnwzsg.png", cAlternateFileName="VSCVR6~1.PNG")) returned 1 [0113.393] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1afef60, ftCreationTime.dwHighDateTime=0x1d5f041, ftLastAccessTime.dwLowDateTime=0x4addc280, ftLastAccessTime.dwHighDateTime=0x1d5ea78, ftLastWriteTime.dwLowDateTime=0x4addc280, ftLastWriteTime.dwHighDateTime=0x1d5ea78, nFileSizeHigh=0x0, nFileSizeLow=0x153c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wc3rdMhB7eu98iYe.bmp", cAlternateFileName="WC3RDM~1.BMP")) returned 1 [0113.393] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3465f3e0, ftCreationTime.dwHighDateTime=0x1d5e92b, ftLastAccessTime.dwLowDateTime=0x76783070, ftLastAccessTime.dwHighDateTime=0x1d5ec98, ftLastWriteTime.dwLowDateTime=0x76783070, ftLastWriteTime.dwHighDateTime=0x1d5ec98, nFileSizeHigh=0x0, nFileSizeLow=0xaeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEkuJK9Xvx8wD8.bmp", cAlternateFileName="WEKUJK~1.BMP")) returned 1 [0113.393] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff17610, ftCreationTime.dwHighDateTime=0x1d5e2d8, ftLastAccessTime.dwLowDateTime=0xf72f1fb0, ftLastAccessTime.dwHighDateTime=0x1d5e551, ftLastWriteTime.dwLowDateTime=0xf72f1fb0, ftLastWriteTime.dwHighDateTime=0x1d5e551, nFileSizeHigh=0x0, nFileSizeLow=0x14c1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wIOKQftMKCZ jEAtZG.mp3", cAlternateFileName="WIOKQF~1.MP3")) returned 1 [0113.393] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecaffb0, ftCreationTime.dwHighDateTime=0x1d5edef, ftLastAccessTime.dwLowDateTime=0xbc841c30, ftLastAccessTime.dwHighDateTime=0x1d5e349, ftLastWriteTime.dwLowDateTime=0xbc841c30, ftLastWriteTime.dwHighDateTime=0x1d5e349, nFileSizeHigh=0x0, nFileSizeLow=0x7791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y fy.wav", cAlternateFileName="YFY~1.WAV")) returned 1 [0113.393] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bdd0a0, ftCreationTime.dwHighDateTime=0x1d5ef53, ftLastAccessTime.dwLowDateTime=0xd6660c30, ftLastAccessTime.dwHighDateTime=0x1d5e3b7, ftLastWriteTime.dwLowDateTime=0xd6660c30, ftLastWriteTime.dwHighDateTime=0x1d5e3b7, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z1vT.mp4", cAlternateFileName="")) returned 1 [0113.393] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8e37d0, ftCreationTime.dwHighDateTime=0x1d5e2e3, ftLastAccessTime.dwLowDateTime=0x14807a0, ftLastAccessTime.dwHighDateTime=0x1d5e99e, ftLastWriteTime.dwLowDateTime=0x14807a0, ftLastWriteTime.dwHighDateTime=0x1d5e99e, nFileSizeHigh=0x0, nFileSizeLow=0xa2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZlZN.mp3", cAlternateFileName="")) returned 1 [0113.394] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.394] FindClose (in: hFindFile=0x7eb090 | out: hFindFile=0x7eb090) returned 1 [0113.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0113.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0113.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0113.394] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0113.394] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x8585faa5, ftLastAccessTime.dwHighDateTime=0x1d6811a, ftLastWriteTime.dwLowDateTime=0x8585faa5, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb4d0 [0113.395] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x8585faa5, ftLastAccessTime.dwHighDateTime=0x1d6811a, ftLastWriteTime.dwLowDateTime=0x8585faa5, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.395] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x263d9f80, ftCreationTime.dwHighDateTime=0x1d5e853, ftLastAccessTime.dwLowDateTime=0xa876c1d0, ftLastAccessTime.dwHighDateTime=0x1d5eec9, ftLastWriteTime.dwLowDateTime=0x84c016f1, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10610, dwReserved0=0x0, dwReserved1=0x0, cFileName="0AnA0vZk.png.klavins", cAlternateFileName="0ANA0V~1.KLA")) returned 1 [0113.395] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2207d2a0, ftCreationTime.dwHighDateTime=0x1d5e240, ftLastAccessTime.dwLowDateTime=0xef59ebb0, ftLastAccessTime.dwHighDateTime=0x1d5e6e3, ftLastWriteTime.dwLowDateTime=0x84df168e, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x92a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1t8mDR.jpg.klavins", cAlternateFileName="1T8MDR~1.KLA")) returned 1 [0113.395] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db178f0, ftCreationTime.dwHighDateTime=0x1d5e542, ftLastAccessTime.dwLowDateTime=0xafdddc00, ftLastAccessTime.dwHighDateTime=0x1d5e637, ftLastWriteTime.dwLowDateTime=0xafdddc00, ftLastWriteTime.dwHighDateTime=0x1d5e637, nFileSizeHigh=0x0, nFileSizeLow=0x1381d, dwReserved0=0x0, dwReserved1=0x0, cFileName="5nnvD0SnI8rgfUNd.ots", cAlternateFileName="5NNVD0~1.OTS")) returned 1 [0113.395] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33603830, ftCreationTime.dwHighDateTime=0x1d5e11e, ftLastAccessTime.dwLowDateTime=0xb5b0a230, ftLastAccessTime.dwHighDateTime=0x1d5e6c7, ftLastWriteTime.dwLowDateTime=0x84efc5c3, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7wdYXjKcwK4g32pSz.pptx.klavins", cAlternateFileName="7WDYXJ~1.KLA")) returned 1 [0113.395] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a10d140, ftCreationTime.dwHighDateTime=0x1d5ee51, ftLastAccessTime.dwLowDateTime=0x67c689c0, ftLastAccessTime.dwHighDateTime=0x1d5ec6e, ftLastWriteTime.dwLowDateTime=0x67c689c0, ftLastWriteTime.dwHighDateTime=0x1d5ec6e, nFileSizeHigh=0x0, nFileSizeLow=0x70e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7Y_nAekfhaFT.ots", cAlternateFileName="7Y_NAE~1.OTS")) returned 1 [0113.396] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d737440, ftCreationTime.dwHighDateTime=0x1d5e27e, ftLastAccessTime.dwLowDateTime=0x6acde4e0, ftLastAccessTime.dwHighDateTime=0x1d5ec43, ftLastWriteTime.dwLowDateTime=0x6acde4e0, ftLastWriteTime.dwHighDateTime=0x1d5ec43, nFileSizeHigh=0x0, nFileSizeLow=0x15e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dcH4og.wav", cAlternateFileName="")) returned 1 [0113.396] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc0f3e0, ftCreationTime.dwHighDateTime=0x1d5ef07, ftLastAccessTime.dwLowDateTime=0xa2b05e30, ftLastAccessTime.dwHighDateTime=0x1d5ef2a, ftLastWriteTime.dwLowDateTime=0x8502da30, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xf440, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARRXev3Mman5ZXl_hU.pptx.klavins", cAlternateFileName="ARRXEV~1.KLA")) returned 1 [0113.396] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd54e650, ftCreationTime.dwHighDateTime=0x1d5e752, ftLastAccessTime.dwLowDateTime=0x56e0c730, ftLastAccessTime.dwHighDateTime=0x1d5eec4, ftLastWriteTime.dwLowDateTime=0x56e0c730, ftLastWriteTime.dwHighDateTime=0x1d5eec4, nFileSizeHigh=0x0, nFileSizeLow=0x895a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ax8TviU3D2R.ots", cAlternateFileName="AX8TVI~1.OTS")) returned 1 [0113.396] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c13ea0, ftCreationTime.dwHighDateTime=0x1d5e81e, ftLastAccessTime.dwLowDateTime=0xe3556050, ftLastAccessTime.dwHighDateTime=0x1d5e83d, ftLastWriteTime.dwLowDateTime=0xe3556050, ftLastWriteTime.dwHighDateTime=0x1d5e83d, nFileSizeHigh=0x0, nFileSizeLow=0x2171, dwReserved0=0x0, dwReserved1=0x0, cFileName="cXBjfxBR_NO6MB4LO.swf", cAlternateFileName="CXBJFX~1.SWF")) returned 1 [0113.396] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0113.396] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaffb5960, ftCreationTime.dwHighDateTime=0x1d5e1f5, ftLastAccessTime.dwLowDateTime=0x3ad2cd0, ftLastAccessTime.dwHighDateTime=0x1d5e856, ftLastWriteTime.dwLowDateTime=0x8509ffe6, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x1e80, dwReserved0=0x0, dwReserved1=0x0, cFileName="DfKt340.csv.klavins", cAlternateFileName="DFKT34~1.KLA")) returned 1 [0113.397] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870aa1e0, ftCreationTime.dwHighDateTime=0x1d5ea4d, ftLastAccessTime.dwLowDateTime=0x591dcb30, ftLastAccessTime.dwHighDateTime=0x1d5e7fb, ftLastWriteTime.dwLowDateTime=0x591dcb30, ftLastWriteTime.dwHighDateTime=0x1d5e7fb, nFileSizeHigh=0x0, nFileSizeLow=0x1631f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eB_j_8aijU.swf", cAlternateFileName="EB_J_8~1.SWF")) returned 1 [0113.397] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5456d90, ftCreationTime.dwHighDateTime=0x1d5ec2e, ftLastAccessTime.dwLowDateTime=0xc5246710, ftLastAccessTime.dwHighDateTime=0x1d5ef5a, ftLastWriteTime.dwLowDateTime=0x851126eb, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x17610, dwReserved0=0x0, dwReserved1=0x0, cFileName="F2Zph36bGvFL1Y8.png.klavins", cAlternateFileName="F2ZPH3~1.KLA")) returned 1 [0113.397] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395f49c0, ftCreationTime.dwHighDateTime=0x1d5ea5a, ftLastAccessTime.dwLowDateTime=0xed74e240, ftLastAccessTime.dwHighDateTime=0x1d5ed29, ftLastWriteTime.dwLowDateTime=0x851868f8, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x172f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FQAxEs.ppt.klavins", cAlternateFileName="FQAXES~1.KLA")) returned 1 [0113.397] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ea6c40, ftCreationTime.dwHighDateTime=0x1d5e9fe, ftLastAccessTime.dwLowDateTime=0x4eef65e0, ftLastAccessTime.dwHighDateTime=0x1d5ecb7, ftLastWriteTime.dwLowDateTime=0x851f9910, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x79f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GJ 5nBR8.jpg.klavins", cAlternateFileName="GJ5NBR~1.KLA")) returned 1 [0113.397] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c20920, ftCreationTime.dwHighDateTime=0x1d5eeac, ftLastAccessTime.dwLowDateTime=0x869c6220, ftLastAccessTime.dwHighDateTime=0x1d5e90d, ftLastWriteTime.dwLowDateTime=0x8528fe77, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xa330, dwReserved0=0x0, dwReserved1=0x0, cFileName="h 8YJOiiEqZdgeYjPirv.mp3.klavins", cAlternateFileName="H8YJOI~1.KLA")) returned 1 [0113.397] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe07393b0, ftCreationTime.dwHighDateTime=0x1d5edfc, ftLastAccessTime.dwLowDateTime=0x164b3390, ftLastAccessTime.dwHighDateTime=0x1d5ee4c, ftLastWriteTime.dwLowDateTime=0x85350222, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x17af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hizAwUh2j6satr-.avi.klavins", cAlternateFileName="HIZAWU~1.KLA")) returned 1 [0113.398] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9e3630, ftCreationTime.dwHighDateTime=0x1d5e3fa, ftLastAccessTime.dwLowDateTime=0x23695ba0, ftLastAccessTime.dwHighDateTime=0x1d5e286, ftLastWriteTime.dwLowDateTime=0x853c11ff, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xc8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ITjYho8KshiaXF3s6dL.bmp.klavins", cAlternateFileName="ITJYHO~1.KLA")) returned 1 [0113.398] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd1b2430, ftCreationTime.dwHighDateTime=0x1d5e526, ftLastAccessTime.dwLowDateTime=0x497dbe0, ftLastAccessTime.dwHighDateTime=0x1d5eb80, ftLastWriteTime.dwLowDateTime=0x854f244b, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="IutzQs5O.mp4.klavins", cAlternateFileName="IUTZQS~1.KLA")) returned 1 [0113.398] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b7cc600, ftCreationTime.dwHighDateTime=0x1d5f014, ftLastAccessTime.dwLowDateTime=0xf90228e0, ftLastAccessTime.dwHighDateTime=0x1d5e4cb, ftLastWriteTime.dwLowDateTime=0xf90228e0, ftLastWriteTime.dwHighDateTime=0x1d5e4cb, nFileSizeHigh=0x0, nFileSizeLow=0x11314, dwReserved0=0x0, dwReserved1=0x0, cFileName="izcDMK.flv", cAlternateFileName="")) returned 1 [0113.398] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae56edb0, ftCreationTime.dwHighDateTime=0x1d5e883, ftLastAccessTime.dwLowDateTime=0x3a57b450, ftLastAccessTime.dwHighDateTime=0x1d5e2d7, ftLastWriteTime.dwLowDateTime=0x8558ae3d, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x27a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="izYGAmbLee1.mp4.klavins", cAlternateFileName="IZYGAM~1.KLA")) returned 1 [0113.398] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eaf2170, ftCreationTime.dwHighDateTime=0x1d5eba6, ftLastAccessTime.dwLowDateTime=0x913a9d30, ftLastAccessTime.dwHighDateTime=0x1d5e536, ftLastWriteTime.dwLowDateTime=0x855fd91c, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x4120, dwReserved0=0x0, dwReserved1=0x0, cFileName="j0g1E J1dJ6jpYrw2.docx.klavins", cAlternateFileName="J0G1EJ~1.KLA")) returned 1 [0113.399] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc2020, ftCreationTime.dwHighDateTime=0x1d5e8fe, ftLastAccessTime.dwLowDateTime=0xab1c6880, ftLastAccessTime.dwHighDateTime=0x1d5e367, ftLastWriteTime.dwLowDateTime=0xab1c6880, ftLastWriteTime.dwHighDateTime=0x1d5e367, nFileSizeHigh=0x0, nFileSizeLow=0x904f, dwReserved0=0x0, dwReserved1=0x0, cFileName="kGaWr7NAi7bG74F9s.m4a", cAlternateFileName="KGAWR7~1.M4A")) returned 1 [0113.399] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d444100, ftCreationTime.dwHighDateTime=0x1d5ec0d, ftLastAccessTime.dwLowDateTime=0xf0b70420, ftLastAccessTime.dwHighDateTime=0x1d5e1d4, ftLastWriteTime.dwLowDateTime=0xf0b70420, ftLastWriteTime.dwHighDateTime=0x1d5e1d4, nFileSizeHigh=0x0, nFileSizeLow=0x1596e, dwReserved0=0x0, dwReserved1=0x0, cFileName="KmRnd.m4a", cAlternateFileName="")) returned 1 [0113.399] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758848b0, ftCreationTime.dwHighDateTime=0x1d5ee39, ftLastAccessTime.dwLowDateTime=0x1a4a5b70, ftLastAccessTime.dwHighDateTime=0x1d5e3c9, ftLastWriteTime.dwLowDateTime=0x856bbf60, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="nerINvzvqPpVy5jmdDIF.mp3.klavins", cAlternateFileName="NERINV~1.KLA")) returned 1 [0113.399] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3c58500, ftCreationTime.dwHighDateTime=0x1d5eac7, ftLastAccessTime.dwLowDateTime=0x3637dbe0, ftLastAccessTime.dwHighDateTime=0x1d5e645, ftLastWriteTime.dwLowDateTime=0x3637dbe0, ftLastWriteTime.dwHighDateTime=0x1d5e645, nFileSizeHigh=0x0, nFileSizeLow=0x84ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="oiGY5u9ZB7j.m4a", cAlternateFileName="OIGY5U~1.M4A")) returned 1 [0113.399] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa973db60, ftCreationTime.dwHighDateTime=0x1d5ee59, ftLastAccessTime.dwLowDateTime=0xf5c52b40, ftLastAccessTime.dwHighDateTime=0x1d5e2e7, ftLastWriteTime.dwLowDateTime=0x857a0f8b, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x1df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7a19TlEPOBemPq3t.png.klavins", cAlternateFileName="P7A19T~1.KLA")) returned 1 [0113.400] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d018500, ftCreationTime.dwHighDateTime=0x1d5e8d3, ftLastAccessTime.dwLowDateTime=0x5909cbd0, ftLastAccessTime.dwHighDateTime=0x1d5e30a, ftLastWriteTime.dwLowDateTime=0x857f1417, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x1020, dwReserved0=0x0, dwReserved1=0x0, cFileName="pBpvOyev.png.klavins", cAlternateFileName="PBPVOY~1.KLA")) returned 1 [0113.400] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe375adb0, ftCreationTime.dwHighDateTime=0x1d5e4c8, ftLastAccessTime.dwLowDateTime=0x86cf6e20, ftLastAccessTime.dwHighDateTime=0x1d5e69e, ftLastWriteTime.dwLowDateTime=0x86cf6e20, ftLastWriteTime.dwHighDateTime=0x1d5e69e, nFileSizeHigh=0x0, nFileSizeLow=0x1911, dwReserved0=0x0, dwReserved1=0x0, cFileName="PQ7lQwDEv8H.wav", cAlternateFileName="PQ7LQW~1.WAV")) returned 1 [0113.400] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2657e80, ftCreationTime.dwHighDateTime=0x1d5e7ef, ftLastAccessTime.dwLowDateTime=0x385a43c0, ftLastAccessTime.dwHighDateTime=0x1d5ecf5, ftLastWriteTime.dwLowDateTime=0x8585faa5, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x35e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RJyw0fBQM2YxvBD_Jfl.mp3.klavins", cAlternateFileName="RJYW0F~1.KLA")) returned 1 [0113.400] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4160bd00, ftCreationTime.dwHighDateTime=0x1d6811a, ftLastAccessTime.dwLowDateTime=0x4160bd00, ftLastAccessTime.dwHighDateTime=0x1d6811a, ftLastWriteTime.dwLowDateTime=0x5b4bd100, ftLastWriteTime.dwHighDateTime=0x1d68115, nFileSizeHigh=0x0, nFileSizeLow=0x33e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="software-launcher.exe", cAlternateFileName="SOFTWA~1.EXE")) returned 1 [0113.400] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17c7880, ftCreationTime.dwHighDateTime=0x1d5ea28, ftLastAccessTime.dwLowDateTime=0xfab0fb90, ftLastAccessTime.dwHighDateTime=0x1d5e371, ftLastWriteTime.dwLowDateTime=0xfab0fb90, ftLastWriteTime.dwHighDateTime=0x1d5e371, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TeX H3fOkrDef9", cAlternateFileName="TEXH3F~1")) returned 1 [0113.401] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4df2060, ftCreationTime.dwHighDateTime=0x1d5e1c9, ftLastAccessTime.dwLowDateTime=0x1373fa30, ftLastAccessTime.dwHighDateTime=0x1d5ecf8, ftLastWriteTime.dwLowDateTime=0x1373fa30, ftLastWriteTime.dwHighDateTime=0x1d5ecf8, nFileSizeHigh=0x0, nFileSizeLow=0x11032, dwReserved0=0x0, dwReserved1=0x0, cFileName="tk-9vhEXizzs.mp4", cAlternateFileName="TK-9VH~1.MP4")) returned 1 [0113.401] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1208fc0, ftCreationTime.dwHighDateTime=0x1d5ee14, ftLastAccessTime.dwLowDateTime=0x53038570, ftLastAccessTime.dwHighDateTime=0x1d5e74f, ftLastWriteTime.dwLowDateTime=0x53038570, ftLastWriteTime.dwHighDateTime=0x1d5e74f, nFileSizeHigh=0x0, nFileSizeLow=0x14edc, dwReserved0=0x0, dwReserved1=0x0, cFileName="uysgQyc.ots", cAlternateFileName="")) returned 1 [0113.401] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dcb39f0, ftCreationTime.dwHighDateTime=0x1d5ed8f, ftLastAccessTime.dwLowDateTime=0x7f7a0520, ftLastAccessTime.dwHighDateTime=0x1d5ed99, ftLastWriteTime.dwLowDateTime=0x7f7a0520, ftLastWriteTime.dwHighDateTime=0x1d5ed99, nFileSizeHigh=0x0, nFileSizeLow=0x12d28, dwReserved0=0x0, dwReserved1=0x0, cFileName="vSCvR6QFBWxnnwzsg.png", cAlternateFileName="VSCVR6~1.PNG")) returned 1 [0113.401] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1afef60, ftCreationTime.dwHighDateTime=0x1d5f041, ftLastAccessTime.dwLowDateTime=0x4addc280, ftLastAccessTime.dwHighDateTime=0x1d5ea78, ftLastWriteTime.dwLowDateTime=0x4addc280, ftLastWriteTime.dwHighDateTime=0x1d5ea78, nFileSizeHigh=0x0, nFileSizeLow=0x153c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wc3rdMhB7eu98iYe.bmp", cAlternateFileName="WC3RDM~1.BMP")) returned 1 [0113.401] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3465f3e0, ftCreationTime.dwHighDateTime=0x1d5e92b, ftLastAccessTime.dwLowDateTime=0x76783070, ftLastAccessTime.dwHighDateTime=0x1d5ec98, ftLastWriteTime.dwLowDateTime=0x76783070, ftLastWriteTime.dwHighDateTime=0x1d5ec98, nFileSizeHigh=0x0, nFileSizeLow=0xaeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEkuJK9Xvx8wD8.bmp", cAlternateFileName="WEKUJK~1.BMP")) returned 1 [0113.402] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff17610, ftCreationTime.dwHighDateTime=0x1d5e2d8, ftLastAccessTime.dwLowDateTime=0xf72f1fb0, ftLastAccessTime.dwHighDateTime=0x1d5e551, ftLastWriteTime.dwLowDateTime=0xf72f1fb0, ftLastWriteTime.dwHighDateTime=0x1d5e551, nFileSizeHigh=0x0, nFileSizeLow=0x14c1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="wIOKQftMKCZ jEAtZG.mp3", cAlternateFileName="WIOKQF~1.MP3")) returned 1 [0113.402] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecaffb0, ftCreationTime.dwHighDateTime=0x1d5edef, ftLastAccessTime.dwLowDateTime=0xbc841c30, ftLastAccessTime.dwHighDateTime=0x1d5e349, ftLastWriteTime.dwLowDateTime=0xbc841c30, ftLastWriteTime.dwHighDateTime=0x1d5e349, nFileSizeHigh=0x0, nFileSizeLow=0x7791, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y fy.wav", cAlternateFileName="YFY~1.WAV")) returned 1 [0113.402] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89bdd0a0, ftCreationTime.dwHighDateTime=0x1d5ef53, ftLastAccessTime.dwLowDateTime=0xd6660c30, ftLastAccessTime.dwHighDateTime=0x1d5e3b7, ftLastWriteTime.dwLowDateTime=0xd6660c30, ftLastWriteTime.dwHighDateTime=0x1d5e3b7, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z1vT.mp4", cAlternateFileName="")) returned 1 [0113.402] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8e37d0, ftCreationTime.dwHighDateTime=0x1d5e2e3, ftLastAccessTime.dwLowDateTime=0x14807a0, ftLastAccessTime.dwHighDateTime=0x1d5e99e, ftLastWriteTime.dwLowDateTime=0x14807a0, ftLastWriteTime.dwHighDateTime=0x1d5e99e, nFileSizeHigh=0x0, nFileSizeLow=0xa2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZlZN.mp3", cAlternateFileName="")) returned 1 [0113.402] FindNextFileW (in: hFindFile=0x7eb4d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8e37d0, ftCreationTime.dwHighDateTime=0x1d5e2e3, ftLastAccessTime.dwLowDateTime=0x14807a0, ftLastAccessTime.dwHighDateTime=0x1d5e99e, ftLastWriteTime.dwLowDateTime=0x14807a0, ftLastWriteTime.dwHighDateTime=0x1d5e99e, nFileSizeHigh=0x0, nFileSizeLow=0xa2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZlZN.mp3", cAlternateFileName="")) returned 0 [0113.403] FindClose (in: hFindFile=0x7eb4d0 | out: hFindFile=0x7eb4d0) returned 1 [0113.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0113.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0113.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", lpFilePart=0x0) returned 0x2d [0113.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\software-launcher.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.403] GetFileType (hFile=0x404) returned 0x1 [0113.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.403] GetFileType (hFile=0x404) returned 0x1 [0113.403] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x33e00 [0113.403] ReadFile (in: hFile=0x404, lpBuffer=0x363a968, nNumberOfBytesToRead=0x33e00, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x363a968*, lpNumberOfBytesRead=0x4fe7ec*=0x33e00, lpOverlapped=0x0) returned 1 [0113.404] CloseHandle (hObject=0x404) returned 1 [0113.439] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.440] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", lpFilePart=0x0) returned 0x2d [0113.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\software-launcher.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0113.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fcad0) returned 1 [0113.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0113.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0113.443] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7155fe0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7155fe0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb510 [0113.444] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7155fe0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7155fe0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.444] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0fa9450, ftCreationTime.dwHighDateTime=0x1d5814d, ftLastAccessTime.dwLowDateTime=0x12609470, ftLastAccessTime.dwHighDateTime=0x1d56cfe, ftLastWriteTime.dwLowDateTime=0x12609470, ftLastWriteTime.dwHighDateTime=0x1d56cfe, nFileSizeHigh=0x0, nFileSizeLow=0xbe92, dwReserved0=0x0, dwReserved1=0x0, cFileName="-rgJK8d18aGGKjf3jJS6.docx", cAlternateFileName="-RGJK8~1.DOC")) returned 1 [0113.444] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac446c0, ftCreationTime.dwHighDateTime=0x1d5ebdb, ftLastAccessTime.dwLowDateTime=0x1de2730, ftLastAccessTime.dwHighDateTime=0x1d5e1c9, ftLastWriteTime.dwLowDateTime=0x1de2730, ftLastWriteTime.dwHighDateTime=0x1d5e1c9, nFileSizeHigh=0x0, nFileSizeLow=0x1198f, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ipeRQ95P5vPU.pptx", cAlternateFileName="0IPERQ~1.PPT")) returned 1 [0113.444] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbe04c0, ftCreationTime.dwHighDateTime=0x1d5a2fc, ftLastAccessTime.dwLowDateTime=0x4984cd60, ftLastAccessTime.dwHighDateTime=0x1d57c47, ftLastWriteTime.dwLowDateTime=0x4984cd60, ftLastWriteTime.dwHighDateTime=0x1d57c47, nFileSizeHigh=0x0, nFileSizeLow=0x9169, dwReserved0=0x0, dwReserved1=0x0, cFileName="AKqc47LFj_gG.pptx", cAlternateFileName="AKQC47~1.PPT")) returned 1 [0113.444] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6b0b130, ftCreationTime.dwHighDateTime=0x1d56694, ftLastAccessTime.dwLowDateTime=0xda072c10, ftLastAccessTime.dwHighDateTime=0x1d5792d, ftLastWriteTime.dwLowDateTime=0xda072c10, ftLastWriteTime.dwHighDateTime=0x1d5792d, nFileSizeHigh=0x0, nFileSizeLow=0xabc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CW2G Cl.xlsx", cAlternateFileName="CW2GCL~1.XLS")) returned 1 [0113.445] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0113.445] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0113.445] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdfb3480, ftCreationTime.dwHighDateTime=0x1d5f07e, ftLastAccessTime.dwLowDateTime=0x35a4abc0, ftLastAccessTime.dwHighDateTime=0x1d5ef89, ftLastWriteTime.dwLowDateTime=0x35a4abc0, ftLastWriteTime.dwHighDateTime=0x1d5ef89, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hk-3y4 Z", cAlternateFileName="HK-3Y4~1")) returned 1 [0113.445] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd51c0c0, ftCreationTime.dwHighDateTime=0x1d5e74c, ftLastAccessTime.dwLowDateTime=0x6706c5f0, ftLastAccessTime.dwHighDateTime=0x1d5ea2e, ftLastWriteTime.dwLowDateTime=0x6706c5f0, ftLastWriteTime.dwHighDateTime=0x1d5ea2e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jIb9", cAlternateFileName="")) returned 1 [0113.445] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63d8b80, ftCreationTime.dwHighDateTime=0x1d5d4e3, ftLastAccessTime.dwLowDateTime=0xf3defd0, ftLastAccessTime.dwHighDateTime=0x1d5cfe7, ftLastWriteTime.dwLowDateTime=0xf3defd0, ftLastWriteTime.dwHighDateTime=0x1d5cfe7, nFileSizeHigh=0x0, nFileSizeLow=0xf4fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="JzyiGvQ.docx", cAlternateFileName="JZYIGV~1.DOC")) returned 1 [0113.446] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8245ad50, ftCreationTime.dwHighDateTime=0x1d5d434, ftLastAccessTime.dwLowDateTime=0x51db3680, ftLastAccessTime.dwHighDateTime=0x1d5edfc, ftLastWriteTime.dwLowDateTime=0x51db3680, ftLastWriteTime.dwHighDateTime=0x1d5edfc, nFileSizeHigh=0x0, nFileSizeLow=0x166c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kTNR_WpOK.pptx", cAlternateFileName="KTNR_W~1.PPT")) returned 1 [0113.446] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf31d1830, ftCreationTime.dwHighDateTime=0x1d5da40, ftLastAccessTime.dwLowDateTime=0x8c4c1ae0, ftLastAccessTime.dwHighDateTime=0x1d59475, ftLastWriteTime.dwLowDateTime=0x8c4c1ae0, ftLastWriteTime.dwHighDateTime=0x1d59475, nFileSizeHigh=0x0, nFileSizeLow=0xf37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="lOc6s5LmDI.pptx", cAlternateFileName="LOC6S5~1.PPT")) returned 1 [0113.446] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b90530, ftCreationTime.dwHighDateTime=0x1d566a8, ftLastAccessTime.dwLowDateTime=0xb67e6c10, ftLastAccessTime.dwHighDateTime=0x1d5c813, ftLastWriteTime.dwLowDateTime=0xb67e6c10, ftLastWriteTime.dwHighDateTime=0x1d5c813, nFileSizeHigh=0x0, nFileSizeLow=0x18fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="lRZjIYnQnY19.pptx", cAlternateFileName="LRZJIY~1.PPT")) returned 1 [0113.446] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0113.446] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0113.447] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0113.448] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0113.448] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1581d0, ftCreationTime.dwHighDateTime=0x1d5d21d, ftLastAccessTime.dwLowDateTime=0x1eb9160, ftLastAccessTime.dwHighDateTime=0x1d56459, ftLastWriteTime.dwLowDateTime=0x1eb9160, ftLastWriteTime.dwHighDateTime=0x1d56459, nFileSizeHigh=0x0, nFileSizeLow=0xebf1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NmJxA2sBDwyT.docx", cAlternateFileName="NMJXA2~1.DOC")) returned 1 [0113.448] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bf4c770, ftCreationTime.dwHighDateTime=0x1d5ce55, ftLastAccessTime.dwLowDateTime=0x83a750e0, ftLastAccessTime.dwHighDateTime=0x1d5a7d9, ftLastWriteTime.dwLowDateTime=0x83a750e0, ftLastWriteTime.dwHighDateTime=0x1d5a7d9, nFileSizeHigh=0x0, nFileSizeLow=0x9d3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="o3iRBVFr.xlsx", cAlternateFileName="O3IRBV~1.XLS")) returned 1 [0113.449] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf69ede0, ftCreationTime.dwHighDateTime=0x1d5c74c, ftLastAccessTime.dwLowDateTime=0x80d56720, ftLastAccessTime.dwHighDateTime=0x1d5758f, ftLastWriteTime.dwLowDateTime=0x80d56720, ftLastWriteTime.dwHighDateTime=0x1d5758f, nFileSizeHigh=0x0, nFileSizeLow=0x4634, dwReserved0=0x0, dwReserved1=0x0, cFileName="oTRPcpyo7xlnr8xSoB.xlsx", cAlternateFileName="OTRPCP~1.XLS")) returned 1 [0113.449] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5ee892ad, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0113.449] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e3cd40, ftCreationTime.dwHighDateTime=0x1d5eb39, ftLastAccessTime.dwLowDateTime=0x216ca9a0, ftLastAccessTime.dwHighDateTime=0x1d5f11e, ftLastWriteTime.dwLowDateTime=0x216ca9a0, ftLastWriteTime.dwHighDateTime=0x1d5f11e, nFileSizeHigh=0x0, nFileSizeLow=0xe517, dwReserved0=0x0, dwReserved1=0x0, cFileName="rDY-p.docx", cAlternateFileName="RDY-P~1.DOC")) returned 1 [0113.449] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ded400, ftCreationTime.dwHighDateTime=0x1d59ee1, ftLastAccessTime.dwLowDateTime=0x112f82b0, ftLastAccessTime.dwHighDateTime=0x1d5ca6d, ftLastWriteTime.dwLowDateTime=0x112f82b0, ftLastWriteTime.dwHighDateTime=0x1d5ca6d, nFileSizeHigh=0x0, nFileSizeLow=0x18df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="s9Q9MbsobyPmk.docx", cAlternateFileName="S9Q9MB~1.DOC")) returned 1 [0113.450] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e0fa40, ftCreationTime.dwHighDateTime=0x1d57b5c, ftLastAccessTime.dwLowDateTime=0xa0dfcc60, ftLastAccessTime.dwHighDateTime=0x1d56e53, ftLastWriteTime.dwLowDateTime=0xa0dfcc60, ftLastWriteTime.dwHighDateTime=0x1d56e53, nFileSizeHigh=0x0, nFileSizeLow=0x7045, dwReserved0=0x0, dwReserved1=0x0, cFileName="S9td1yxQaW.xlsx", cAlternateFileName="S9TD1Y~1.XLS")) returned 1 [0113.450] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea7c150, ftCreationTime.dwHighDateTime=0x1d5e72d, ftLastAccessTime.dwLowDateTime=0x7e866aa0, ftLastAccessTime.dwHighDateTime=0x1d5e678, ftLastWriteTime.dwLowDateTime=0x7e866aa0, ftLastWriteTime.dwHighDateTime=0x1d5e678, nFileSizeHigh=0x0, nFileSizeLow=0x409, dwReserved0=0x0, dwReserved1=0x0, cFileName="tYx7dofd2TiCHl.xlsx", cAlternateFileName="TYX7DO~1.XLS")) returned 1 [0113.450] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e12c90, ftCreationTime.dwHighDateTime=0x1d5ac6e, ftLastAccessTime.dwLowDateTime=0x465271e0, ftLastAccessTime.dwHighDateTime=0x1d57df7, ftLastWriteTime.dwLowDateTime=0x465271e0, ftLastWriteTime.dwHighDateTime=0x1d57df7, nFileSizeHigh=0x0, nFileSizeLow=0x357c, dwReserved0=0x0, dwReserved1=0x0, cFileName="u dyL-47D6N2ohhiX8v.xlsx", cAlternateFileName="UDYL-4~1.XLS")) returned 1 [0113.450] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1eee40, ftCreationTime.dwHighDateTime=0x1d5e0fa, ftLastAccessTime.dwLowDateTime=0xc883b700, ftLastAccessTime.dwHighDateTime=0x1d5ee4f, ftLastWriteTime.dwLowDateTime=0xc883b700, ftLastWriteTime.dwHighDateTime=0x1d5ee4f, nFileSizeHigh=0x0, nFileSizeLow=0x1446, dwReserved0=0x0, dwReserved1=0x0, cFileName="udof.ods", cAlternateFileName="")) returned 1 [0113.450] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67474150, ftCreationTime.dwHighDateTime=0x1d5e44f, ftLastAccessTime.dwLowDateTime=0xbfa98fd0, ftLastAccessTime.dwHighDateTime=0x1d56b3f, ftLastWriteTime.dwLowDateTime=0xbfa98fd0, ftLastWriteTime.dwHighDateTime=0x1d56b3f, nFileSizeHigh=0x0, nFileSizeLow=0xf171, dwReserved0=0x0, dwReserved1=0x0, cFileName="WuUKAB.docx", cAlternateFileName="WUUKAB~1.DOC")) returned 1 [0113.451] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9336a60, ftCreationTime.dwHighDateTime=0x1d5e3e8, ftLastAccessTime.dwLowDateTime=0xe2061ba0, ftLastAccessTime.dwHighDateTime=0x1d5e5da, ftLastWriteTime.dwLowDateTime=0xe2061ba0, ftLastWriteTime.dwHighDateTime=0x1d5e5da, nFileSizeHigh=0x0, nFileSizeLow=0x183e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="YfVXE.ppt", cAlternateFileName="")) returned 1 [0113.451] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd46b9950, ftCreationTime.dwHighDateTime=0x1d5766a, ftLastAccessTime.dwLowDateTime=0x9319e5a0, ftLastAccessTime.dwHighDateTime=0x1d5cb39, ftLastWriteTime.dwLowDateTime=0x9319e5a0, ftLastWriteTime.dwHighDateTime=0x1d5cb39, nFileSizeHigh=0x0, nFileSizeLow=0x10cb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Lz08ftp5sW.pptx", cAlternateFileName="_LZ08F~1.PPT")) returned 1 [0113.451] FindNextFileW (in: hFindFile=0x7eb510, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.451] FindClose (in: hFindFile=0x7eb510 | out: hFindFile=0x7eb510) returned 1 [0113.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0113.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0113.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0113.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0113.452] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7155fe0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7155fe0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb2d0 [0113.452] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7155fe0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7155fe0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.452] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0fa9450, ftCreationTime.dwHighDateTime=0x1d5814d, ftLastAccessTime.dwLowDateTime=0x12609470, ftLastAccessTime.dwHighDateTime=0x1d56cfe, ftLastWriteTime.dwLowDateTime=0x12609470, ftLastWriteTime.dwHighDateTime=0x1d56cfe, nFileSizeHigh=0x0, nFileSizeLow=0xbe92, dwReserved0=0x0, dwReserved1=0x0, cFileName="-rgJK8d18aGGKjf3jJS6.docx", cAlternateFileName="-RGJK8~1.DOC")) returned 1 [0113.452] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac446c0, ftCreationTime.dwHighDateTime=0x1d5ebdb, ftLastAccessTime.dwLowDateTime=0x1de2730, ftLastAccessTime.dwHighDateTime=0x1d5e1c9, ftLastWriteTime.dwLowDateTime=0x1de2730, ftLastWriteTime.dwHighDateTime=0x1d5e1c9, nFileSizeHigh=0x0, nFileSizeLow=0x1198f, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ipeRQ95P5vPU.pptx", cAlternateFileName="0IPERQ~1.PPT")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbe04c0, ftCreationTime.dwHighDateTime=0x1d5a2fc, ftLastAccessTime.dwLowDateTime=0x4984cd60, ftLastAccessTime.dwHighDateTime=0x1d57c47, ftLastWriteTime.dwLowDateTime=0x4984cd60, ftLastWriteTime.dwHighDateTime=0x1d57c47, nFileSizeHigh=0x0, nFileSizeLow=0x9169, dwReserved0=0x0, dwReserved1=0x0, cFileName="AKqc47LFj_gG.pptx", cAlternateFileName="AKQC47~1.PPT")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6b0b130, ftCreationTime.dwHighDateTime=0x1d56694, ftLastAccessTime.dwLowDateTime=0xda072c10, ftLastAccessTime.dwHighDateTime=0x1d5792d, ftLastWriteTime.dwLowDateTime=0xda072c10, ftLastWriteTime.dwHighDateTime=0x1d5792d, nFileSizeHigh=0x0, nFileSizeLow=0xabc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CW2G Cl.xlsx", cAlternateFileName="CW2GCL~1.XLS")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0113.453] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdfb3480, ftCreationTime.dwHighDateTime=0x1d5f07e, ftLastAccessTime.dwLowDateTime=0x35a4abc0, ftLastAccessTime.dwHighDateTime=0x1d5ef89, ftLastWriteTime.dwLowDateTime=0x35a4abc0, ftLastWriteTime.dwHighDateTime=0x1d5ef89, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hk-3y4 Z", cAlternateFileName="HK-3Y4~1")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd51c0c0, ftCreationTime.dwHighDateTime=0x1d5e74c, ftLastAccessTime.dwLowDateTime=0x6706c5f0, ftLastAccessTime.dwHighDateTime=0x1d5ea2e, ftLastWriteTime.dwLowDateTime=0x6706c5f0, ftLastWriteTime.dwHighDateTime=0x1d5ea2e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jIb9", cAlternateFileName="")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63d8b80, ftCreationTime.dwHighDateTime=0x1d5d4e3, ftLastAccessTime.dwLowDateTime=0xf3defd0, ftLastAccessTime.dwHighDateTime=0x1d5cfe7, ftLastWriteTime.dwLowDateTime=0xf3defd0, ftLastWriteTime.dwHighDateTime=0x1d5cfe7, nFileSizeHigh=0x0, nFileSizeLow=0xf4fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="JzyiGvQ.docx", cAlternateFileName="JZYIGV~1.DOC")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8245ad50, ftCreationTime.dwHighDateTime=0x1d5d434, ftLastAccessTime.dwLowDateTime=0x51db3680, ftLastAccessTime.dwHighDateTime=0x1d5edfc, ftLastWriteTime.dwLowDateTime=0x51db3680, ftLastWriteTime.dwHighDateTime=0x1d5edfc, nFileSizeHigh=0x0, nFileSizeLow=0x166c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="kTNR_WpOK.pptx", cAlternateFileName="KTNR_W~1.PPT")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf31d1830, ftCreationTime.dwHighDateTime=0x1d5da40, ftLastAccessTime.dwLowDateTime=0x8c4c1ae0, ftLastAccessTime.dwHighDateTime=0x1d59475, ftLastWriteTime.dwLowDateTime=0x8c4c1ae0, ftLastWriteTime.dwHighDateTime=0x1d59475, nFileSizeHigh=0x0, nFileSizeLow=0xf37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="lOc6s5LmDI.pptx", cAlternateFileName="LOC6S5~1.PPT")) returned 1 [0113.454] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b90530, ftCreationTime.dwHighDateTime=0x1d566a8, ftLastAccessTime.dwLowDateTime=0xb67e6c10, ftLastAccessTime.dwHighDateTime=0x1d5c813, ftLastWriteTime.dwLowDateTime=0xb67e6c10, ftLastWriteTime.dwHighDateTime=0x1d5c813, nFileSizeHigh=0x0, nFileSizeLow=0x18fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="lRZjIYnQnY19.pptx", cAlternateFileName="LRZJIY~1.PPT")) returned 1 [0113.455] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0113.455] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0113.455] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0113.455] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0113.455] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1581d0, ftCreationTime.dwHighDateTime=0x1d5d21d, ftLastAccessTime.dwLowDateTime=0x1eb9160, ftLastAccessTime.dwHighDateTime=0x1d56459, ftLastWriteTime.dwLowDateTime=0x1eb9160, ftLastWriteTime.dwHighDateTime=0x1d56459, nFileSizeHigh=0x0, nFileSizeLow=0xebf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="NmJxA2sBDwyT.docx", cAlternateFileName="NMJXA2~1.DOC")) returned 1 [0113.455] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bf4c770, ftCreationTime.dwHighDateTime=0x1d5ce55, ftLastAccessTime.dwLowDateTime=0x83a750e0, ftLastAccessTime.dwHighDateTime=0x1d5a7d9, ftLastWriteTime.dwLowDateTime=0x83a750e0, ftLastWriteTime.dwHighDateTime=0x1d5a7d9, nFileSizeHigh=0x0, nFileSizeLow=0x9d3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="o3iRBVFr.xlsx", cAlternateFileName="O3IRBV~1.XLS")) returned 1 [0113.456] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf69ede0, ftCreationTime.dwHighDateTime=0x1d5c74c, ftLastAccessTime.dwLowDateTime=0x80d56720, ftLastAccessTime.dwHighDateTime=0x1d5758f, ftLastWriteTime.dwLowDateTime=0x80d56720, ftLastWriteTime.dwHighDateTime=0x1d5758f, nFileSizeHigh=0x0, nFileSizeLow=0x4634, dwReserved0=0x0, dwReserved1=0x0, cFileName="oTRPcpyo7xlnr8xSoB.xlsx", cAlternateFileName="OTRPCP~1.XLS")) returned 1 [0113.456] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5ee892ad, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0113.456] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e3cd40, ftCreationTime.dwHighDateTime=0x1d5eb39, ftLastAccessTime.dwLowDateTime=0x216ca9a0, ftLastAccessTime.dwHighDateTime=0x1d5f11e, ftLastWriteTime.dwLowDateTime=0x216ca9a0, ftLastWriteTime.dwHighDateTime=0x1d5f11e, nFileSizeHigh=0x0, nFileSizeLow=0xe517, dwReserved0=0x0, dwReserved1=0x0, cFileName="rDY-p.docx", cAlternateFileName="RDY-P~1.DOC")) returned 1 [0113.461] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ded400, ftCreationTime.dwHighDateTime=0x1d59ee1, ftLastAccessTime.dwLowDateTime=0x112f82b0, ftLastAccessTime.dwHighDateTime=0x1d5ca6d, ftLastWriteTime.dwLowDateTime=0x112f82b0, ftLastWriteTime.dwHighDateTime=0x1d5ca6d, nFileSizeHigh=0x0, nFileSizeLow=0x18df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="s9Q9MbsobyPmk.docx", cAlternateFileName="S9Q9MB~1.DOC")) returned 1 [0113.461] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e0fa40, ftCreationTime.dwHighDateTime=0x1d57b5c, ftLastAccessTime.dwLowDateTime=0xa0dfcc60, ftLastAccessTime.dwHighDateTime=0x1d56e53, ftLastWriteTime.dwLowDateTime=0xa0dfcc60, ftLastWriteTime.dwHighDateTime=0x1d56e53, nFileSizeHigh=0x0, nFileSizeLow=0x7045, dwReserved0=0x0, dwReserved1=0x0, cFileName="S9td1yxQaW.xlsx", cAlternateFileName="S9TD1Y~1.XLS")) returned 1 [0113.462] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea7c150, ftCreationTime.dwHighDateTime=0x1d5e72d, ftLastAccessTime.dwLowDateTime=0x7e866aa0, ftLastAccessTime.dwHighDateTime=0x1d5e678, ftLastWriteTime.dwLowDateTime=0x7e866aa0, ftLastWriteTime.dwHighDateTime=0x1d5e678, nFileSizeHigh=0x0, nFileSizeLow=0x409, dwReserved0=0x0, dwReserved1=0x0, cFileName="tYx7dofd2TiCHl.xlsx", cAlternateFileName="TYX7DO~1.XLS")) returned 1 [0113.462] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e12c90, ftCreationTime.dwHighDateTime=0x1d5ac6e, ftLastAccessTime.dwLowDateTime=0x465271e0, ftLastAccessTime.dwHighDateTime=0x1d57df7, ftLastWriteTime.dwLowDateTime=0x465271e0, ftLastWriteTime.dwHighDateTime=0x1d57df7, nFileSizeHigh=0x0, nFileSizeLow=0x357c, dwReserved0=0x0, dwReserved1=0x0, cFileName="u dyL-47D6N2ohhiX8v.xlsx", cAlternateFileName="UDYL-4~1.XLS")) returned 1 [0113.462] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1eee40, ftCreationTime.dwHighDateTime=0x1d5e0fa, ftLastAccessTime.dwLowDateTime=0xc883b700, ftLastAccessTime.dwHighDateTime=0x1d5ee4f, ftLastWriteTime.dwLowDateTime=0xc883b700, ftLastWriteTime.dwHighDateTime=0x1d5ee4f, nFileSizeHigh=0x0, nFileSizeLow=0x1446, dwReserved0=0x0, dwReserved1=0x0, cFileName="udof.ods", cAlternateFileName="")) returned 1 [0113.462] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67474150, ftCreationTime.dwHighDateTime=0x1d5e44f, ftLastAccessTime.dwLowDateTime=0xbfa98fd0, ftLastAccessTime.dwHighDateTime=0x1d56b3f, ftLastWriteTime.dwLowDateTime=0xbfa98fd0, ftLastWriteTime.dwHighDateTime=0x1d56b3f, nFileSizeHigh=0x0, nFileSizeLow=0xf171, dwReserved0=0x0, dwReserved1=0x0, cFileName="WuUKAB.docx", cAlternateFileName="WUUKAB~1.DOC")) returned 1 [0113.462] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9336a60, ftCreationTime.dwHighDateTime=0x1d5e3e8, ftLastAccessTime.dwLowDateTime=0xe2061ba0, ftLastAccessTime.dwHighDateTime=0x1d5e5da, ftLastWriteTime.dwLowDateTime=0xe2061ba0, ftLastWriteTime.dwHighDateTime=0x1d5e5da, nFileSizeHigh=0x0, nFileSizeLow=0x183e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="YfVXE.ppt", cAlternateFileName="")) returned 1 [0113.462] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd46b9950, ftCreationTime.dwHighDateTime=0x1d5766a, ftLastAccessTime.dwLowDateTime=0x9319e5a0, ftLastAccessTime.dwHighDateTime=0x1d5cb39, ftLastWriteTime.dwLowDateTime=0x9319e5a0, ftLastWriteTime.dwHighDateTime=0x1d5cb39, nFileSizeHigh=0x0, nFileSizeLow=0x10cb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Lz08ftp5sW.pptx", cAlternateFileName="_LZ08F~1.PPT")) returned 1 [0113.463] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd46b9950, ftCreationTime.dwHighDateTime=0x1d5766a, ftLastAccessTime.dwLowDateTime=0x9319e5a0, ftLastAccessTime.dwHighDateTime=0x1d5cb39, ftLastWriteTime.dwLowDateTime=0x9319e5a0, ftLastWriteTime.dwHighDateTime=0x1d5cb39, nFileSizeHigh=0x0, nFileSizeLow=0x10cb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Lz08ftp5sW.pptx", cAlternateFileName="_LZ08F~1.PPT")) returned 0 [0113.463] FindClose (in: hFindFile=0x7eb2d0 | out: hFindFile=0x7eb2d0) returned 1 [0113.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0113.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0113.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx", lpFilePart=0x0) returned 0x33 [0113.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-rgjk8d18aggkjf3jjs6.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.463] GetFileType (hFile=0x404) returned 0x1 [0113.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.463] GetFileType (hFile=0x404) returned 0x1 [0113.463] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xbe92 [0113.464] ReadFile (in: hFile=0x404, lpBuffer=0x25035b0, nNumberOfBytesToRead=0xbe92, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x25035b0*, lpNumberOfBytesRead=0x4fe7ec*=0xbe92, lpOverlapped=0x0) returned 1 [0113.465] CloseHandle (hObject=0x404) returned 1 [0113.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx", lpFilePart=0x0) returned 0x33 [0113.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.524] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-rgjk8d18aggkjf3jjs6.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.526] GetFileType (hFile=0x404) returned 0x1 [0113.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.526] GetFileType (hFile=0x404) returned 0x1 [0113.526] WriteFile (in: hFile=0x404, lpBuffer=0x2573f90*, nNumberOfBytesToWrite=0xbea0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2573f90*, lpNumberOfBytesWritten=0x4fe7e0*=0xbea0, lpOverlapped=0x0) returned 1 [0113.527] CloseHandle (hObject=0x404) returned 1 [0113.532] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx", lpFilePart=0x0) returned 0x33 [0113.532] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx.klavins", lpFilePart=0x0) returned 0x3b [0113.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-rgjk8d18aggkjf3jjs6.docx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0fa9450, ftCreationTime.dwHighDateTime=0x1d5814d, ftLastAccessTime.dwLowDateTime=0x12609470, ftLastAccessTime.dwHighDateTime=0x1d56cfe, ftLastWriteTime.dwLowDateTime=0x85c19530, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xbea0)) returned 1 [0113.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.532] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-rgjk8d18aggkjf3jjs6.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\-rgJK8d18aGGKjf3jJS6.docx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\-rgjk8d18aggkjf3jjs6.docx.klavins")) returned 1 [0113.533] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx", lpFilePart=0x0) returned 0x2c [0113.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.534] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\0iperq95p5vpu.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.534] GetFileType (hFile=0x404) returned 0x1 [0113.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.534] GetFileType (hFile=0x404) returned 0x1 [0113.534] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x1198f [0113.534] ReadFile (in: hFile=0x404, lpBuffer=0x25802fc, nNumberOfBytesToRead=0x1198f, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x25802fc*, lpNumberOfBytesRead=0x4fe7ec*=0x1198f, lpOverlapped=0x0) returned 1 [0113.536] CloseHandle (hObject=0x404) returned 1 [0113.565] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx", lpFilePart=0x0) returned 0x2c [0113.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.566] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\0iperq95p5vpu.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.568] GetFileType (hFile=0x404) returned 0x1 [0113.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.568] GetFileType (hFile=0x404) returned 0x1 [0113.568] WriteFile (in: hFile=0x404, lpBuffer=0x2415ab8*, nNumberOfBytesToWrite=0x11990, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2415ab8*, lpNumberOfBytesWritten=0x4fe7e0*=0x11990, lpOverlapped=0x0) returned 1 [0113.571] CloseHandle (hObject=0x404) returned 1 [0113.631] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx", lpFilePart=0x0) returned 0x2c [0113.631] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx.klavins", lpFilePart=0x0) returned 0x34 [0113.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\0iperq95p5vpu.pptx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac446c0, ftCreationTime.dwHighDateTime=0x1d5ebdb, ftLastAccessTime.dwLowDateTime=0x1de2730, ftLastAccessTime.dwHighDateTime=0x1d5e1c9, ftLastWriteTime.dwLowDateTime=0x85d24468, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x11990)) returned 1 [0113.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.631] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\0iperq95p5vpu.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\0ipeRQ95P5vPU.pptx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\0iperq95p5vpu.pptx.klavins")) returned 1 [0113.632] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx", lpFilePart=0x0) returned 0x2b [0113.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.632] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\akqc47lfj_gg.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.632] GetFileType (hFile=0x404) returned 0x1 [0113.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.632] GetFileType (hFile=0x404) returned 0x1 [0113.632] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x9169 [0113.633] ReadFile (in: hFile=0x404, lpBuffer=0x24278d0, nNumberOfBytesToRead=0x9169, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x24278d0*, lpNumberOfBytesRead=0x4fe7ec*=0x9169, lpOverlapped=0x0) returned 1 [0113.634] CloseHandle (hObject=0x404) returned 1 [0113.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.696] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx", lpFilePart=0x0) returned 0x2b [0113.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.696] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\akqc47lfj_gg.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.697] GetFileType (hFile=0x404) returned 0x1 [0113.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.697] GetFileType (hFile=0x404) returned 0x1 [0113.697] WriteFile (in: hFile=0x404, lpBuffer=0x24a1f48*, nNumberOfBytesToWrite=0x9170, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x24a1f48*, lpNumberOfBytesWritten=0x4fe7e0*=0x9170, lpOverlapped=0x0) returned 1 [0113.699] CloseHandle (hObject=0x404) returned 1 [0113.701] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx", lpFilePart=0x0) returned 0x2b [0113.701] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx.klavins", lpFilePart=0x0) returned 0x33 [0113.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\akqc47lfj_gg.pptx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fbe04c0, ftCreationTime.dwHighDateTime=0x1d5a2fc, ftLastAccessTime.dwLowDateTime=0x4984cd60, ftLastAccessTime.dwHighDateTime=0x1d57c47, ftLastWriteTime.dwLowDateTime=0x85dbd3dd, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x9170)) returned 1 [0113.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.701] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\akqc47lfj_gg.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\AKqc47LFj_gG.pptx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\akqc47lfj_gg.pptx.klavins")) returned 1 [0113.702] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx", lpFilePart=0x0) returned 0x26 [0113.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\cw2g cl.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.702] GetFileType (hFile=0x404) returned 0x1 [0113.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.702] GetFileType (hFile=0x404) returned 0x1 [0113.703] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xabc6 [0113.703] ReadFile (in: hFile=0x404, lpBuffer=0x24ab51c, nNumberOfBytesToRead=0xabc6, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x24ab51c*, lpNumberOfBytesRead=0x4fe7ec*=0xabc6, lpOverlapped=0x0) returned 1 [0113.704] CloseHandle (hObject=0x404) returned 1 [0113.761] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx", lpFilePart=0x0) returned 0x26 [0113.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.762] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\cw2g cl.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.764] GetFileType (hFile=0x404) returned 0x1 [0113.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.764] GetFileType (hFile=0x404) returned 0x1 [0113.764] WriteFile (in: hFile=0x404, lpBuffer=0x251868c*, nNumberOfBytesToWrite=0xabd0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x251868c*, lpNumberOfBytesWritten=0x4fe7e0*=0xabd0, lpOverlapped=0x0) returned 1 [0113.765] CloseHandle (hObject=0x404) returned 1 [0113.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx", lpFilePart=0x0) returned 0x26 [0113.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx.klavins", lpFilePart=0x0) returned 0x2e [0113.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\cw2g cl.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6b0b130, ftCreationTime.dwHighDateTime=0x1d56694, ftLastAccessTime.dwLowDateTime=0xda072c10, ftLastAccessTime.dwHighDateTime=0x1d5792d, ftLastWriteTime.dwLowDateTime=0x85e55836, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xabd0)) returned 1 [0113.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.767] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\cw2g cl.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\CW2G Cl.xlsx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\cw2g cl.xlsx.klavins")) returned 1 [0113.768] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx", lpFilePart=0x0) returned 0x26 [0113.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.768] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jzyigvq.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.768] GetFileType (hFile=0x404) returned 0x1 [0113.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.768] GetFileType (hFile=0x404) returned 0x1 [0113.768] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xf4fd [0113.769] ReadFile (in: hFile=0x404, lpBuffer=0x25236cc, nNumberOfBytesToRead=0xf4fd, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x25236cc*, lpNumberOfBytesRead=0x4fe7ec*=0xf4fd, lpOverlapped=0x0) returned 1 [0113.771] CloseHandle (hObject=0x404) returned 1 [0113.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx", lpFilePart=0x0) returned 0x26 [0113.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.794] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jzyigvq.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.795] GetFileType (hFile=0x404) returned 0x1 [0113.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.796] GetFileType (hFile=0x404) returned 0x1 [0113.796] WriteFile (in: hFile=0x404, lpBuffer=0x259e3cc*, nNumberOfBytesToWrite=0xf500, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x259e3cc*, lpNumberOfBytesWritten=0x4fe7e0*=0xf500, lpOverlapped=0x0) returned 1 [0113.797] CloseHandle (hObject=0x404) returned 1 [0113.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx", lpFilePart=0x0) returned 0x26 [0113.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx.klavins", lpFilePart=0x0) returned 0x2e [0113.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jzyigvq.docx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63d8b80, ftCreationTime.dwHighDateTime=0x1d5d4e3, ftLastAccessTime.dwLowDateTime=0xf3defd0, ftLastAccessTime.dwHighDateTime=0x1d5cfe7, ftLastWriteTime.dwLowDateTime=0x85ea1ce6, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xf500)) returned 1 [0113.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.800] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jzyigvq.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\JzyiGvQ.docx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jzyigvq.docx.klavins")) returned 1 [0113.801] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx", lpFilePart=0x0) returned 0x28 [0113.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.801] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ktnr_wpok.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.801] GetFileType (hFile=0x404) returned 0x1 [0113.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.801] GetFileType (hFile=0x404) returned 0x1 [0113.801] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x166c8 [0113.802] ReadFile (in: hFile=0x404, lpBuffer=0x35afd28, nNumberOfBytesToRead=0x166c8, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x35afd28*, lpNumberOfBytesRead=0x4fe7ec*=0x166c8, lpOverlapped=0x0) returned 1 [0113.803] CloseHandle (hObject=0x404) returned 1 [0113.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx", lpFilePart=0x0) returned 0x28 [0113.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.841] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ktnr_wpok.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.843] GetFileType (hFile=0x404) returned 0x1 [0113.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.843] GetFileType (hFile=0x404) returned 0x1 [0113.843] WriteFile (in: hFile=0x404, lpBuffer=0x36cf348*, nNumberOfBytesToWrite=0x166d0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x36cf348*, lpNumberOfBytesWritten=0x4fe7e0*=0x166d0, lpOverlapped=0x0) returned 1 [0113.845] CloseHandle (hObject=0x404) returned 1 [0113.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx", lpFilePart=0x0) returned 0x28 [0113.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx.klavins", lpFilePart=0x0) returned 0x30 [0113.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ktnr_wpok.pptx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8245ad50, ftCreationTime.dwHighDateTime=0x1d5d434, ftLastAccessTime.dwLowDateTime=0x51db3680, ftLastAccessTime.dwHighDateTime=0x1d5edfc, ftLastWriteTime.dwLowDateTime=0x85f4fa57, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x166d0)) returned 1 [0113.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.857] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ktnr_wpok.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kTNR_WpOK.pptx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\ktnr_wpok.pptx.klavins")) returned 1 [0113.857] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx", lpFilePart=0x0) returned 0x29 [0113.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\loc6s5lmdi.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.858] GetFileType (hFile=0x404) returned 0x1 [0113.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.858] GetFileType (hFile=0x404) returned 0x1 [0113.858] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xf37d [0113.858] ReadFile (in: hFile=0x404, lpBuffer=0x23fb5a0, nNumberOfBytesToRead=0xf37d, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x23fb5a0*, lpNumberOfBytesRead=0x4fe7ec*=0xf37d, lpOverlapped=0x0) returned 1 [0113.859] CloseHandle (hObject=0x404) returned 1 [0113.877] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.878] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx", lpFilePart=0x0) returned 0x29 [0113.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.878] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\loc6s5lmdi.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.881] GetFileType (hFile=0x404) returned 0x1 [0113.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.881] GetFileType (hFile=0x404) returned 0x1 [0113.881] WriteFile (in: hFile=0x404, lpBuffer=0x2475f7c*, nNumberOfBytesToWrite=0xf380, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2475f7c*, lpNumberOfBytesWritten=0x4fe7e0*=0xf380, lpOverlapped=0x0) returned 1 [0113.883] CloseHandle (hObject=0x404) returned 1 [0113.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx", lpFilePart=0x0) returned 0x29 [0113.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx.klavins", lpFilePart=0x0) returned 0x31 [0113.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\loc6s5lmdi.pptx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf31d1830, ftCreationTime.dwHighDateTime=0x1d5da40, ftLastAccessTime.dwLowDateTime=0x8c4c1ae0, ftLastAccessTime.dwHighDateTime=0x1d59475, ftLastWriteTime.dwLowDateTime=0x85f86b6f, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xf380)) returned 1 [0113.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.885] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\loc6s5lmdi.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\lOc6s5LmDI.pptx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\loc6s5lmdi.pptx.klavins")) returned 1 [0113.886] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx", lpFilePart=0x0) returned 0x2b [0113.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\lrzjiynqny19.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.886] GetFileType (hFile=0x404) returned 0x1 [0113.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.886] GetFileType (hFile=0x404) returned 0x1 [0113.886] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x18fe7 [0113.887] ReadFile (in: hFile=0x404, lpBuffer=0x3704138, nNumberOfBytesToRead=0x18fe7, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x3704138*, lpNumberOfBytesRead=0x4fe7ec*=0x18fe7, lpOverlapped=0x0) returned 1 [0113.889] CloseHandle (hObject=0x404) returned 1 [0113.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0113.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0113.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0113.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0113.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx", lpFilePart=0x0) returned 0x2b [0113.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0113.930] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\lrzjiynqny19.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.932] GetFileType (hFile=0x404) returned 0x1 [0113.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0113.933] GetFileType (hFile=0x404) returned 0x1 [0113.933] WriteFile (in: hFile=0x404, lpBuffer=0x3405a28*, nNumberOfBytesToWrite=0x18ff0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x3405a28*, lpNumberOfBytesWritten=0x4fe7e0*=0x18ff0, lpOverlapped=0x0) returned 1 [0113.936] CloseHandle (hObject=0x404) returned 1 [0113.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx", lpFilePart=0x0) returned 0x2b [0113.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx.klavins", lpFilePart=0x0) returned 0x33 [0113.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0113.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\lrzjiynqny19.pptx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b90530, ftCreationTime.dwHighDateTime=0x1d566a8, ftLastAccessTime.dwLowDateTime=0xb67e6c10, ftLastAccessTime.dwHighDateTime=0x1d5c813, ftLastWriteTime.dwLowDateTime=0x85ff91e7, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x18ff0)) returned 1 [0113.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0113.940] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\lrzjiynqny19.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\lRZjIYnQnY19.pptx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\lrzjiynqny19.pptx.klavins")) returned 1 [0113.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx", lpFilePart=0x0) returned 0x2b [0113.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0113.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx" (normalized: "c:\\users\\fd1hvy\\documents\\nmjxa2sbdwyt.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0113.942] GetFileType (hFile=0x404) returned 0x1 [0113.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0113.942] GetFileType (hFile=0x404) returned 0x1 [0113.942] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xebf1 [0113.942] ReadFile (in: hFile=0x404, lpBuffer=0x23b3fe4, nNumberOfBytesToRead=0xebf1, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x23b3fe4*, lpNumberOfBytesRead=0x4fe7ec*=0xebf1, lpOverlapped=0x0) returned 1 [0113.943] CloseHandle (hObject=0x404) returned 1 [0114.159] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0114.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0114.160] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx", lpFilePart=0x0) returned 0x2b [0114.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0114.160] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx" (normalized: "c:\\users\\fd1hvy\\documents\\nmjxa2sbdwyt.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.162] GetFileType (hFile=0x404) returned 0x1 [0114.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0114.162] GetFileType (hFile=0x404) returned 0x1 [0114.162] WriteFile (in: hFile=0x404, lpBuffer=0x242d340*, nNumberOfBytesToWrite=0xec00, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x242d340*, lpNumberOfBytesWritten=0x4fe7e0*=0xec00, lpOverlapped=0x0) returned 1 [0114.164] CloseHandle (hObject=0x404) returned 1 [0114.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx", lpFilePart=0x0) returned 0x2b [0114.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx.klavins", lpFilePart=0x0) returned 0x33 [0114.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0114.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx" (normalized: "c:\\users\\fd1hvy\\documents\\nmjxa2sbdwyt.docx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e1581d0, ftCreationTime.dwHighDateTime=0x1d5d21d, ftLastAccessTime.dwLowDateTime=0x1eb9160, ftLastAccessTime.dwHighDateTime=0x1d56459, ftLastWriteTime.dwLowDateTime=0x8623569d, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xec00)) returned 1 [0114.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0114.167] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx" (normalized: "c:\\users\\fd1hvy\\documents\\nmjxa2sbdwyt.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\NmJxA2sBDwyT.docx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\nmjxa2sbdwyt.docx.klavins")) returned 1 [0114.168] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx", lpFilePart=0x0) returned 0x27 [0114.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.168] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\o3irbvfr.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.168] GetFileType (hFile=0x404) returned 0x1 [0114.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.168] GetFileType (hFile=0x404) returned 0x1 [0114.169] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x9d3b [0114.169] ReadFile (in: hFile=0x404, lpBuffer=0x243c3a4, nNumberOfBytesToRead=0x9d3b, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x243c3a4*, lpNumberOfBytesRead=0x4fe7ec*=0x9d3b, lpOverlapped=0x0) returned 1 [0114.170] CloseHandle (hObject=0x404) returned 1 [0114.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0114.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0114.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx", lpFilePart=0x0) returned 0x27 [0114.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0114.201] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\o3irbvfr.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.202] GetFileType (hFile=0x404) returned 0x1 [0114.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0114.202] GetFileType (hFile=0x404) returned 0x1 [0114.202] WriteFile (in: hFile=0x404, lpBuffer=0x24ba3d0*, nNumberOfBytesToWrite=0x9d40, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x24ba3d0*, lpNumberOfBytesWritten=0x4fe7e0*=0x9d40, lpOverlapped=0x0) returned 1 [0114.204] CloseHandle (hObject=0x404) returned 1 [0114.211] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx", lpFilePart=0x0) returned 0x27 [0114.211] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx.klavins", lpFilePart=0x0) returned 0x2f [0114.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0114.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\o3irbvfr.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bf4c770, ftCreationTime.dwHighDateTime=0x1d5ce55, ftLastAccessTime.dwLowDateTime=0x83a750e0, ftLastAccessTime.dwHighDateTime=0x1d5a7d9, ftLastWriteTime.dwLowDateTime=0x862affa3, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x9d40)) returned 1 [0114.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0114.211] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\o3irbvfr.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\o3iRBVFr.xlsx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\o3irbvfr.xlsx.klavins")) returned 1 [0114.212] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx", lpFilePart=0x0) returned 0x31 [0114.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.213] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\otrpcpyo7xlnr8xsob.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.213] GetFileType (hFile=0x404) returned 0x1 [0114.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.213] GetFileType (hFile=0x404) returned 0x1 [0114.213] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x4634 [0114.213] ReadFile (in: hFile=0x404, lpBuffer=0x24c4574, nNumberOfBytesToRead=0x4634, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x24c4574*, lpNumberOfBytesRead=0x4fe7ec*=0x4634, lpOverlapped=0x0) returned 1 [0114.214] CloseHandle (hObject=0x404) returned 1 [0114.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0114.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0114.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx", lpFilePart=0x0) returned 0x31 [0114.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0114.231] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\otrpcpyo7xlnr8xsob.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.232] GetFileType (hFile=0x404) returned 0x1 [0114.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0114.233] GetFileType (hFile=0x404) returned 0x1 [0114.233] WriteFile (in: hFile=0x404, lpBuffer=0x252729c*, nNumberOfBytesToWrite=0x4640, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x252729c*, lpNumberOfBytesWritten=0x4fe7e0*=0x4640, lpOverlapped=0x0) returned 1 [0114.234] CloseHandle (hObject=0x404) returned 1 [0114.239] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx", lpFilePart=0x0) returned 0x31 [0114.240] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx.klavins", lpFilePart=0x0) returned 0x39 [0114.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0114.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\otrpcpyo7xlnr8xsob.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf69ede0, ftCreationTime.dwHighDateTime=0x1d5c74c, ftLastAccessTime.dwLowDateTime=0x80d56720, ftLastAccessTime.dwHighDateTime=0x1d5758f, ftLastWriteTime.dwLowDateTime=0x862f4697, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x4640)) returned 1 [0114.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0114.240] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\otrpcpyo7xlnr8xsob.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\oTRPcpyo7xlnr8xSoB.xlsx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\otrpcpyo7xlnr8xsob.xlsx.klavins")) returned 1 [0114.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx", lpFilePart=0x0) returned 0x24 [0114.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.241] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx" (normalized: "c:\\users\\fd1hvy\\documents\\rdy-p.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.241] GetFileType (hFile=0x404) returned 0x1 [0114.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.241] GetFileType (hFile=0x404) returned 0x1 [0114.241] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xe517 [0114.241] ReadFile (in: hFile=0x404, lpBuffer=0x252bd74, nNumberOfBytesToRead=0xe517, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x252bd74*, lpNumberOfBytesRead=0x4fe7ec*=0xe517, lpOverlapped=0x0) returned 1 [0114.243] CloseHandle (hObject=0x404) returned 1 [0114.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0114.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0114.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx", lpFilePart=0x0) returned 0x24 [0114.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0114.273] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx" (normalized: "c:\\users\\fd1hvy\\documents\\rdy-p.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.274] GetFileType (hFile=0x404) returned 0x1 [0114.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0114.274] GetFileType (hFile=0x404) returned 0x1 [0114.275] WriteFile (in: hFile=0x404, lpBuffer=0x25a3ad4*, nNumberOfBytesToWrite=0xe520, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x25a3ad4*, lpNumberOfBytesWritten=0x4fe7e0*=0xe520, lpOverlapped=0x0) returned 1 [0114.277] CloseHandle (hObject=0x404) returned 1 [0114.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx", lpFilePart=0x0) returned 0x24 [0114.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx.klavins", lpFilePart=0x0) returned 0x2c [0114.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0114.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx" (normalized: "c:\\users\\fd1hvy\\documents\\rdy-p.docx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e3cd40, ftCreationTime.dwHighDateTime=0x1d5eb39, ftLastAccessTime.dwLowDateTime=0x216ca9a0, ftLastAccessTime.dwHighDateTime=0x1d5f11e, ftLastWriteTime.dwLowDateTime=0x86340605, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xe520)) returned 1 [0114.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0114.280] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx" (normalized: "c:\\users\\fd1hvy\\documents\\rdy-p.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\rDY-p.docx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\rdy-p.docx.klavins")) returned 1 [0114.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx", lpFilePart=0x0) returned 0x2c [0114.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx" (normalized: "c:\\users\\fd1hvy\\documents\\s9q9mbsobypmk.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.281] GetFileType (hFile=0x404) returned 0x1 [0114.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.281] GetFileType (hFile=0x404) returned 0x1 [0114.281] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x18df2 [0114.281] ReadFile (in: hFile=0x404, lpBuffer=0x3458c78, nNumberOfBytesToRead=0x18df2, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x3458c78*, lpNumberOfBytesRead=0x4fe7ec*=0x18df2, lpOverlapped=0x0) returned 1 [0114.283] CloseHandle (hObject=0x404) returned 1 [0114.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0114.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0114.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx", lpFilePart=0x0) returned 0x2c [0114.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0114.393] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx" (normalized: "c:\\users\\fd1hvy\\documents\\s9q9mbsobypmk.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.396] GetFileType (hFile=0x404) returned 0x1 [0114.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0114.396] GetFileType (hFile=0x404) returned 0x1 [0114.396] WriteFile (in: hFile=0x404, lpBuffer=0x34d52a8*, nNumberOfBytesToWrite=0x18e00, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x34d52a8*, lpNumberOfBytesWritten=0x4fe7e0*=0x18e00, lpOverlapped=0x0) returned 1 [0114.399] CloseHandle (hObject=0x404) returned 1 [0114.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx", lpFilePart=0x0) returned 0x2c [0114.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx.klavins", lpFilePart=0x0) returned 0x34 [0114.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0114.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx" (normalized: "c:\\users\\fd1hvy\\documents\\s9q9mbsobypmk.docx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ded400, ftCreationTime.dwHighDateTime=0x1d59ee1, ftLastAccessTime.dwLowDateTime=0x112f82b0, ftLastAccessTime.dwHighDateTime=0x1d5ca6d, ftLastWriteTime.dwLowDateTime=0x8647bac7, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x18e00)) returned 1 [0114.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0114.404] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx" (normalized: "c:\\users\\fd1hvy\\documents\\s9q9mbsobypmk.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\s9Q9MbsobyPmk.docx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\s9q9mbsobypmk.docx.klavins")) returned 1 [0114.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx", lpFilePart=0x0) returned 0x29 [0114.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.405] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\s9td1yxqaw.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.405] GetFileType (hFile=0x404) returned 0x1 [0114.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.405] GetFileType (hFile=0x404) returned 0x1 [0114.405] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x7045 [0114.405] ReadFile (in: hFile=0x404, lpBuffer=0x23ffcb0, nNumberOfBytesToRead=0x7045, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x23ffcb0*, lpNumberOfBytesRead=0x4fe7ec*=0x7045, lpOverlapped=0x0) returned 1 [0114.407] CloseHandle (hObject=0x404) returned 1 [0114.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0114.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0114.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx", lpFilePart=0x0) returned 0x29 [0114.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0114.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\s9td1yxqaw.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.443] GetFileType (hFile=0x404) returned 0x1 [0114.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0114.444] GetFileType (hFile=0x404) returned 0x1 [0114.444] WriteFile (in: hFile=0x404, lpBuffer=0x246fd88*, nNumberOfBytesToWrite=0x7050, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x246fd88*, lpNumberOfBytesWritten=0x4fe7e0*=0x7050, lpOverlapped=0x0) returned 1 [0114.445] CloseHandle (hObject=0x404) returned 1 [0114.475] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx", lpFilePart=0x0) returned 0x29 [0114.475] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx.klavins", lpFilePart=0x0) returned 0x31 [0114.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0114.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\s9td1yxqaw.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e0fa40, ftCreationTime.dwHighDateTime=0x1d57b5c, ftLastAccessTime.dwLowDateTime=0xa0dfcc60, ftLastAccessTime.dwHighDateTime=0x1d56e53, ftLastWriteTime.dwLowDateTime=0x86527014, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x7050)) returned 1 [0114.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0114.476] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\s9td1yxqaw.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\S9td1yxQaW.xlsx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\s9td1yxqaw.xlsx.klavins")) returned 1 [0114.477] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx", lpFilePart=0x0) returned 0x2d [0114.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.477] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\tyx7dofd2tichl.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.477] GetFileType (hFile=0x404) returned 0x1 [0114.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.477] GetFileType (hFile=0x404) returned 0x1 [0114.477] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x409 [0114.477] ReadFile (in: hFile=0x404, lpBuffer=0x2477658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2477658*, lpNumberOfBytesRead=0x4fe7ec*=0x409, lpOverlapped=0x0) returned 1 [0114.479] CloseHandle (hObject=0x404) returned 1 [0114.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0114.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0114.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx", lpFilePart=0x0) returned 0x2d [0114.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0114.506] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\tyx7dofd2tichl.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.507] GetFileType (hFile=0x404) returned 0x1 [0114.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0114.507] GetFileType (hFile=0x404) returned 0x1 [0114.510] WriteFile (in: hFile=0x404, lpBuffer=0x24c6ac0*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x4fe7b4, lpOverlapped=0x0 | out: lpBuffer=0x24c6ac0*, lpNumberOfBytesWritten=0x4fe7b4*=0x410, lpOverlapped=0x0) returned 1 [0114.512] CloseHandle (hObject=0x404) returned 1 [0114.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx", lpFilePart=0x0) returned 0x2d [0114.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx.klavins", lpFilePart=0x0) returned 0x35 [0114.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0114.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\tyx7dofd2tichl.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea7c150, ftCreationTime.dwHighDateTime=0x1d5e72d, ftLastAccessTime.dwLowDateTime=0x7e866aa0, ftLastAccessTime.dwHighDateTime=0x1d5e678, ftLastWriteTime.dwLowDateTime=0x865985ed, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0114.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0114.516] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\tyx7dofd2tichl.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\tYx7dofd2TiCHl.xlsx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\tyx7dofd2tichl.xlsx.klavins")) returned 1 [0114.518] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx", lpFilePart=0x0) returned 0x32 [0114.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.518] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\u dyl-47d6n2ohhix8v.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.518] GetFileType (hFile=0x404) returned 0x1 [0114.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.518] GetFileType (hFile=0x404) returned 0x1 [0114.518] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x357c [0114.518] ReadFile (in: hFile=0x404, lpBuffer=0x24c7d4c, nNumberOfBytesToRead=0x357c, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x24c7d4c*, lpNumberOfBytesRead=0x4fe7ec*=0x357c, lpOverlapped=0x0) returned 1 [0114.520] CloseHandle (hObject=0x404) returned 1 [0114.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0114.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0114.551] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx", lpFilePart=0x0) returned 0x32 [0114.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0114.551] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\u dyl-47d6n2ohhix8v.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.552] GetFileType (hFile=0x404) returned 0x1 [0114.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0114.552] GetFileType (hFile=0x404) returned 0x1 [0114.552] WriteFile (in: hFile=0x404, lpBuffer=0x25256b4*, nNumberOfBytesToWrite=0x3580, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x25256b4*, lpNumberOfBytesWritten=0x4fe7e0*=0x3580, lpOverlapped=0x0) returned 1 [0114.554] CloseHandle (hObject=0x404) returned 1 [0114.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx", lpFilePart=0x0) returned 0x32 [0114.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx.klavins", lpFilePart=0x0) returned 0x3a [0114.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0114.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\u dyl-47d6n2ohhix8v.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e12c90, ftCreationTime.dwHighDateTime=0x1d5ac6e, ftLastAccessTime.dwLowDateTime=0x465271e0, ftLastAccessTime.dwHighDateTime=0x1d57df7, ftLastWriteTime.dwLowDateTime=0x865e5a54, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x3580)) returned 1 [0114.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0114.556] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\u dyl-47d6n2ohhix8v.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\u dyL-47D6N2ohhiX8v.xlsx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\u dyl-47d6n2ohhix8v.xlsx.klavins")) returned 1 [0114.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx", lpFilePart=0x0) returned 0x25 [0114.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.556] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx" (normalized: "c:\\users\\fd1hvy\\documents\\wuukab.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.556] GetFileType (hFile=0x404) returned 0x1 [0114.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.557] GetFileType (hFile=0x404) returned 0x1 [0114.557] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xf171 [0114.557] ReadFile (in: hFile=0x404, lpBuffer=0x25290f8, nNumberOfBytesToRead=0xf171, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x25290f8*, lpNumberOfBytesRead=0x4fe7ec*=0xf171, lpOverlapped=0x0) returned 1 [0114.558] CloseHandle (hObject=0x404) returned 1 [0114.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0114.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0114.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx", lpFilePart=0x0) returned 0x25 [0114.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0114.575] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx" (normalized: "c:\\users\\fd1hvy\\documents\\wuukab.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.576] GetFileType (hFile=0x404) returned 0x1 [0114.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0114.576] GetFileType (hFile=0x404) returned 0x1 [0114.577] WriteFile (in: hFile=0x404, lpBuffer=0x25a3378*, nNumberOfBytesToWrite=0xf180, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x25a3378*, lpNumberOfBytesWritten=0x4fe7e0*=0xf180, lpOverlapped=0x0) returned 1 [0114.579] CloseHandle (hObject=0x404) returned 1 [0114.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx", lpFilePart=0x0) returned 0x25 [0114.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx.klavins", lpFilePart=0x0) returned 0x2d [0114.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0114.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx" (normalized: "c:\\users\\fd1hvy\\documents\\wuukab.docx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67474150, ftCreationTime.dwHighDateTime=0x1d5e44f, ftLastAccessTime.dwLowDateTime=0xbfa98fd0, ftLastAccessTime.dwHighDateTime=0x1d56b3f, ftLastWriteTime.dwLowDateTime=0x86631e0d, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xf180)) returned 1 [0114.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0114.581] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx" (normalized: "c:\\users\\fd1hvy\\documents\\wuukab.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\WuUKAB.docx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\wuukab.docx.klavins")) returned 1 [0114.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt", lpFilePart=0x0) returned 0x23 [0114.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.582] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\yfvxe.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.582] GetFileType (hFile=0x404) returned 0x1 [0114.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.582] GetFileType (hFile=0x404) returned 0x1 [0114.582] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x183e6 [0114.582] ReadFile (in: hFile=0x404, lpBuffer=0x350c3c8, nNumberOfBytesToRead=0x183e6, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x350c3c8*, lpNumberOfBytesRead=0x4fe7ec*=0x183e6, lpOverlapped=0x0) returned 1 [0114.583] CloseHandle (hObject=0x404) returned 1 [0114.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0114.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0114.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt", lpFilePart=0x0) returned 0x23 [0114.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0114.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\yfvxe.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.659] GetFileType (hFile=0x404) returned 0x1 [0114.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0114.659] GetFileType (hFile=0x404) returned 0x1 [0114.659] WriteFile (in: hFile=0x404, lpBuffer=0x35857b0*, nNumberOfBytesToWrite=0x183f0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x35857b0*, lpNumberOfBytesWritten=0x4fe7e0*=0x183f0, lpOverlapped=0x0) returned 1 [0114.661] CloseHandle (hObject=0x404) returned 1 [0114.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt", lpFilePart=0x0) returned 0x23 [0114.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt.klavins", lpFilePart=0x0) returned 0x2b [0114.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0114.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\yfvxe.ppt"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9336a60, ftCreationTime.dwHighDateTime=0x1d5e3e8, ftLastAccessTime.dwLowDateTime=0xe2061ba0, ftLastAccessTime.dwHighDateTime=0x1d5e5da, ftLastWriteTime.dwLowDateTime=0x866f0a54, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x183f0)) returned 1 [0114.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0114.665] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\yfvxe.ppt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\YfVXE.ppt.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\yfvxe.ppt.klavins")) returned 1 [0114.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx", lpFilePart=0x0) returned 0x2a [0114.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\_lz08ftp5sw.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.666] GetFileType (hFile=0x404) returned 0x1 [0114.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.666] GetFileType (hFile=0x404) returned 0x1 [0114.666] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x10cb2 [0114.666] ReadFile (in: hFile=0x404, lpBuffer=0x2400188, nNumberOfBytesToRead=0x10cb2, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2400188*, lpNumberOfBytesRead=0x4fe7ec*=0x10cb2, lpOverlapped=0x0) returned 1 [0114.668] CloseHandle (hObject=0x404) returned 1 [0114.685] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0114.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0114.685] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx", lpFilePart=0x0) returned 0x2a [0114.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0114.686] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\_lz08ftp5sw.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.691] GetFileType (hFile=0x404) returned 0x1 [0114.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0114.691] GetFileType (hFile=0x404) returned 0x1 [0114.691] WriteFile (in: hFile=0x404, lpBuffer=0x247f724*, nNumberOfBytesToWrite=0x10cc0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x247f724*, lpNumberOfBytesWritten=0x4fe7e0*=0x10cc0, lpOverlapped=0x0) returned 1 [0114.693] CloseHandle (hObject=0x404) returned 1 [0114.700] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx", lpFilePart=0x0) returned 0x2a [0114.700] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx.klavins", lpFilePart=0x0) returned 0x32 [0114.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0114.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\_lz08ftp5sw.pptx"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd46b9950, ftCreationTime.dwHighDateTime=0x1d5766a, ftLastAccessTime.dwLowDateTime=0x9319e5a0, ftLastAccessTime.dwHighDateTime=0x1d5cb39, ftLastWriteTime.dwLowDateTime=0x8673cf36, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10cc0)) returned 1 [0114.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0114.701] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\_lz08ftp5sw.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_Lz08ftp5sW.pptx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\_lz08ftp5sw.pptx.klavins")) returned 1 [0114.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0114.702] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z", lpFilePart=0x0) returned 0x22 [0114.702] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdfb3480, ftCreationTime.dwHighDateTime=0x1d5f07e, ftLastAccessTime.dwLowDateTime=0x35a4abc0, ftLastAccessTime.dwHighDateTime=0x1d5ef89, ftLastWriteTime.dwLowDateTime=0x35a4abc0, ftLastWriteTime.dwHighDateTime=0x1d5ef89, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb450 [0114.703] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdfb3480, ftCreationTime.dwHighDateTime=0x1d5f07e, ftLastAccessTime.dwLowDateTime=0x35a4abc0, ftLastAccessTime.dwHighDateTime=0x1d5ef89, ftLastWriteTime.dwLowDateTime=0x35a4abc0, ftLastWriteTime.dwHighDateTime=0x1d5ef89, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.703] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecec02b0, ftCreationTime.dwHighDateTime=0x1d5f0d8, ftLastAccessTime.dwLowDateTime=0x90ba0110, ftLastAccessTime.dwHighDateTime=0x1d5ef32, ftLastWriteTime.dwLowDateTime=0x90ba0110, ftLastWriteTime.dwHighDateTime=0x1d5ef32, nFileSizeHigh=0x0, nFileSizeLow=0x73a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ahuw-2wwsNhH5cBV3ZiN.ots", cAlternateFileName="AHUW-2~1.OTS")) returned 1 [0114.703] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e204b0, ftCreationTime.dwHighDateTime=0x1d5efc0, ftLastAccessTime.dwLowDateTime=0x6c5940b0, ftLastAccessTime.dwHighDateTime=0x1d5edc0, ftLastWriteTime.dwLowDateTime=0x6c5940b0, ftLastWriteTime.dwHighDateTime=0x1d5edc0, nFileSizeHigh=0x0, nFileSizeLow=0x1217b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DENgOQJXpzWPt2_H6mmf.ots", cAlternateFileName="DENGOQ~1.OTS")) returned 1 [0114.704] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7bb030, ftCreationTime.dwHighDateTime=0x1d5e969, ftLastAccessTime.dwLowDateTime=0x8e8378a0, ftLastAccessTime.dwHighDateTime=0x1d5ec2a, ftLastWriteTime.dwLowDateTime=0x8e8378a0, ftLastWriteTime.dwHighDateTime=0x1d5ec2a, nFileSizeHigh=0x0, nFileSizeLow=0x68bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HYVYAe7mdnOqw.xlsx", cAlternateFileName="HYVYAE~1.XLS")) returned 1 [0114.704] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9603fc70, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0x98e0c880, ftLastAccessTime.dwHighDateTime=0x1d5f0b6, ftLastWriteTime.dwLowDateTime=0x98e0c880, ftLastWriteTime.dwHighDateTime=0x1d5f0b6, nFileSizeHigh=0x0, nFileSizeLow=0x12450, dwReserved0=0x0, dwReserved1=0x0, cFileName="RpZM0W8PY7CeeXD.pptx", cAlternateFileName="RPZM0W~1.PPT")) returned 1 [0114.704] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74a3efe0, ftCreationTime.dwHighDateTime=0x1d5e438, ftLastAccessTime.dwLowDateTime=0xeb5469a0, ftLastAccessTime.dwHighDateTime=0x1d5eb70, ftLastWriteTime.dwLowDateTime=0xeb5469a0, ftLastWriteTime.dwHighDateTime=0x1d5eb70, nFileSizeHigh=0x0, nFileSizeLow=0x15a6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RvR6p1OB7oIlqR32.odp", cAlternateFileName="RVR6P1~1.ODP")) returned 1 [0114.704] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d59c360, ftCreationTime.dwHighDateTime=0x1d5f014, ftLastAccessTime.dwLowDateTime=0x3a1cff00, ftLastAccessTime.dwHighDateTime=0x1d5e308, ftLastWriteTime.dwLowDateTime=0x3a1cff00, ftLastWriteTime.dwHighDateTime=0x1d5e308, nFileSizeHigh=0x0, nFileSizeLow=0xb044, dwReserved0=0x0, dwReserved1=0x0, cFileName="umP4YYQ84x7G.csv", cAlternateFileName="UMP4YY~1.CSV")) returned 1 [0114.704] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb539a70, ftCreationTime.dwHighDateTime=0x1d5e5b1, ftLastAccessTime.dwLowDateTime=0xdee85020, ftLastAccessTime.dwHighDateTime=0x1d5e385, ftLastWriteTime.dwLowDateTime=0xdee85020, ftLastWriteTime.dwHighDateTime=0x1d5e385, nFileSizeHigh=0x0, nFileSizeLow=0x34ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="VqL UPl-9nlySS.xls", cAlternateFileName="VQLUPL~1.XLS")) returned 1 [0114.705] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb1b3770, ftCreationTime.dwHighDateTime=0x1d5ed27, ftLastAccessTime.dwLowDateTime=0xc0ef0e40, ftLastAccessTime.dwHighDateTime=0x1d5e387, ftLastWriteTime.dwLowDateTime=0xc0ef0e40, ftLastWriteTime.dwHighDateTime=0x1d5e387, nFileSizeHigh=0x0, nFileSizeLow=0xc9e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WI5sqFLMbDy3IJuvREh2.rtf", cAlternateFileName="WI5SQF~1.RTF")) returned 1 [0114.705] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c36f1c0, ftCreationTime.dwHighDateTime=0x1d5e910, ftLastAccessTime.dwLowDateTime=0x1cb70580, ftLastAccessTime.dwHighDateTime=0x1d5e1e3, ftLastWriteTime.dwLowDateTime=0x1cb70580, ftLastWriteTime.dwHighDateTime=0x1d5e1e3, nFileSizeHigh=0x0, nFileSizeLow=0x14a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="x H8Jy Bf7dELLms9.pptx", cAlternateFileName="XH8JYB~1.PPT")) returned 1 [0114.705] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.705] FindClose (in: hFindFile=0x7eb450 | out: hFindFile=0x7eb450) returned 1 [0114.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0114.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0114.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0114.706] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z", lpFilePart=0x0) returned 0x22 [0114.706] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdfb3480, ftCreationTime.dwHighDateTime=0x1d5f07e, ftLastAccessTime.dwLowDateTime=0x35a4abc0, ftLastAccessTime.dwHighDateTime=0x1d5ef89, ftLastWriteTime.dwLowDateTime=0x35a4abc0, ftLastWriteTime.dwHighDateTime=0x1d5ef89, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb150 [0114.706] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdfb3480, ftCreationTime.dwHighDateTime=0x1d5f07e, ftLastAccessTime.dwLowDateTime=0x35a4abc0, ftLastAccessTime.dwHighDateTime=0x1d5ef89, ftLastWriteTime.dwLowDateTime=0x35a4abc0, ftLastWriteTime.dwHighDateTime=0x1d5ef89, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.706] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecec02b0, ftCreationTime.dwHighDateTime=0x1d5f0d8, ftLastAccessTime.dwLowDateTime=0x90ba0110, ftLastAccessTime.dwHighDateTime=0x1d5ef32, ftLastWriteTime.dwLowDateTime=0x90ba0110, ftLastWriteTime.dwHighDateTime=0x1d5ef32, nFileSizeHigh=0x0, nFileSizeLow=0x73a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ahuw-2wwsNhH5cBV3ZiN.ots", cAlternateFileName="AHUW-2~1.OTS")) returned 1 [0114.706] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4e204b0, ftCreationTime.dwHighDateTime=0x1d5efc0, ftLastAccessTime.dwLowDateTime=0x6c5940b0, ftLastAccessTime.dwHighDateTime=0x1d5edc0, ftLastWriteTime.dwLowDateTime=0x6c5940b0, ftLastWriteTime.dwHighDateTime=0x1d5edc0, nFileSizeHigh=0x0, nFileSizeLow=0x1217b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DENgOQJXpzWPt2_H6mmf.ots", cAlternateFileName="DENGOQ~1.OTS")) returned 1 [0114.707] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7bb030, ftCreationTime.dwHighDateTime=0x1d5e969, ftLastAccessTime.dwLowDateTime=0x8e8378a0, ftLastAccessTime.dwHighDateTime=0x1d5ec2a, ftLastWriteTime.dwLowDateTime=0x8e8378a0, ftLastWriteTime.dwHighDateTime=0x1d5ec2a, nFileSizeHigh=0x0, nFileSizeLow=0x68bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="HYVYAe7mdnOqw.xlsx", cAlternateFileName="HYVYAE~1.XLS")) returned 1 [0114.707] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9603fc70, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0x98e0c880, ftLastAccessTime.dwHighDateTime=0x1d5f0b6, ftLastWriteTime.dwLowDateTime=0x98e0c880, ftLastWriteTime.dwHighDateTime=0x1d5f0b6, nFileSizeHigh=0x0, nFileSizeLow=0x12450, dwReserved0=0x0, dwReserved1=0x0, cFileName="RpZM0W8PY7CeeXD.pptx", cAlternateFileName="RPZM0W~1.PPT")) returned 1 [0114.707] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74a3efe0, ftCreationTime.dwHighDateTime=0x1d5e438, ftLastAccessTime.dwLowDateTime=0xeb5469a0, ftLastAccessTime.dwHighDateTime=0x1d5eb70, ftLastWriteTime.dwLowDateTime=0xeb5469a0, ftLastWriteTime.dwHighDateTime=0x1d5eb70, nFileSizeHigh=0x0, nFileSizeLow=0x15a6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="RvR6p1OB7oIlqR32.odp", cAlternateFileName="RVR6P1~1.ODP")) returned 1 [0114.707] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d59c360, ftCreationTime.dwHighDateTime=0x1d5f014, ftLastAccessTime.dwLowDateTime=0x3a1cff00, ftLastAccessTime.dwHighDateTime=0x1d5e308, ftLastWriteTime.dwLowDateTime=0x3a1cff00, ftLastWriteTime.dwHighDateTime=0x1d5e308, nFileSizeHigh=0x0, nFileSizeLow=0xb044, dwReserved0=0x0, dwReserved1=0x0, cFileName="umP4YYQ84x7G.csv", cAlternateFileName="UMP4YY~1.CSV")) returned 1 [0114.708] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb539a70, ftCreationTime.dwHighDateTime=0x1d5e5b1, ftLastAccessTime.dwLowDateTime=0xdee85020, ftLastAccessTime.dwHighDateTime=0x1d5e385, ftLastWriteTime.dwLowDateTime=0xdee85020, ftLastWriteTime.dwHighDateTime=0x1d5e385, nFileSizeHigh=0x0, nFileSizeLow=0x34ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="VqL UPl-9nlySS.xls", cAlternateFileName="VQLUPL~1.XLS")) returned 1 [0114.708] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb1b3770, ftCreationTime.dwHighDateTime=0x1d5ed27, ftLastAccessTime.dwLowDateTime=0xc0ef0e40, ftLastAccessTime.dwHighDateTime=0x1d5e387, ftLastWriteTime.dwLowDateTime=0xc0ef0e40, ftLastWriteTime.dwHighDateTime=0x1d5e387, nFileSizeHigh=0x0, nFileSizeLow=0xc9e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WI5sqFLMbDy3IJuvREh2.rtf", cAlternateFileName="WI5SQF~1.RTF")) returned 1 [0114.708] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c36f1c0, ftCreationTime.dwHighDateTime=0x1d5e910, ftLastAccessTime.dwLowDateTime=0x1cb70580, ftLastAccessTime.dwHighDateTime=0x1d5e1e3, ftLastWriteTime.dwLowDateTime=0x1cb70580, ftLastWriteTime.dwHighDateTime=0x1d5e1e3, nFileSizeHigh=0x0, nFileSizeLow=0x14a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="x H8Jy Bf7dELLms9.pptx", cAlternateFileName="XH8JYB~1.PPT")) returned 1 [0114.708] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c36f1c0, ftCreationTime.dwHighDateTime=0x1d5e910, ftLastAccessTime.dwLowDateTime=0x1cb70580, ftLastAccessTime.dwHighDateTime=0x1d5e1e3, ftLastWriteTime.dwLowDateTime=0x1cb70580, ftLastWriteTime.dwHighDateTime=0x1d5e1e3, nFileSizeHigh=0x0, nFileSizeLow=0x14a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="x H8Jy Bf7dELLms9.pptx", cAlternateFileName="XH8JYB~1.PPT")) returned 0 [0114.708] FindClose (in: hFindFile=0x7eb150 | out: hFindFile=0x7eb150) returned 1 [0114.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0114.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0114.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx", lpFilePart=0x0) returned 0x35 [0114.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0114.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\hyvyae7mdnoqw.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.709] GetFileType (hFile=0x404) returned 0x1 [0114.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0114.709] GetFileType (hFile=0x404) returned 0x1 [0114.709] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x68bc [0114.709] ReadFile (in: hFile=0x404, lpBuffer=0x24931b4, nNumberOfBytesToRead=0x68bc, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x24931b4*, lpNumberOfBytesRead=0x4fe778*=0x68bc, lpOverlapped=0x0) returned 1 [0114.711] CloseHandle (hObject=0x404) returned 1 [0114.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx", lpFilePart=0x0) returned 0x35 [0114.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0114.800] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\hyvyae7mdnoqw.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.802] GetFileType (hFile=0x404) returned 0x1 [0114.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0114.802] GetFileType (hFile=0x404) returned 0x1 [0114.802] WriteFile (in: hFile=0x404, lpBuffer=0x2500b5c*, nNumberOfBytesToWrite=0x68c0, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x2500b5c*, lpNumberOfBytesWritten=0x4fe76c*=0x68c0, lpOverlapped=0x0) returned 1 [0114.803] CloseHandle (hObject=0x404) returned 1 [0114.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx", lpFilePart=0x0) returned 0x35 [0114.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx.klavins", lpFilePart=0x0) returned 0x3d [0114.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0114.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\hyvyae7mdnoqw.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7bb030, ftCreationTime.dwHighDateTime=0x1d5e969, ftLastAccessTime.dwLowDateTime=0x8e8378a0, ftLastAccessTime.dwHighDateTime=0x1d5ec2a, ftLastWriteTime.dwLowDateTime=0x86847ed5, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x68c0)) returned 1 [0114.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0114.805] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\hyvyae7mdnoqw.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\HYVYAe7mdnOqw.xlsx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\hyvyae7mdnoqw.xlsx.klavins")) returned 1 [0114.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx", lpFilePart=0x0) returned 0x37 [0114.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0114.805] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\rpzm0w8py7ceexd.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.806] GetFileType (hFile=0x404) returned 0x1 [0114.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0114.806] GetFileType (hFile=0x404) returned 0x1 [0114.806] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x12450 [0114.806] ReadFile (in: hFile=0x404, lpBuffer=0x2507904, nNumberOfBytesToRead=0x12450, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x2507904*, lpNumberOfBytesRead=0x4fe778*=0x12450, lpOverlapped=0x0) returned 1 [0114.807] CloseHandle (hObject=0x404) returned 1 [0114.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx", lpFilePart=0x0) returned 0x37 [0114.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0114.838] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\rpzm0w8py7ceexd.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.840] GetFileType (hFile=0x404) returned 0x1 [0114.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0114.840] GetFileType (hFile=0x404) returned 0x1 [0114.841] WriteFile (in: hFile=0x404, lpBuffer=0x258b420*, nNumberOfBytesToWrite=0x12460, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x258b420*, lpNumberOfBytesWritten=0x4fe76c*=0x12460, lpOverlapped=0x0) returned 1 [0114.844] CloseHandle (hObject=0x404) returned 1 [0114.847] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx", lpFilePart=0x0) returned 0x37 [0114.847] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx.klavins", lpFilePart=0x0) returned 0x3f [0114.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0114.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\rpzm0w8py7ceexd.pptx"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9603fc70, ftCreationTime.dwHighDateTime=0x1d5ebd6, ftLastAccessTime.dwLowDateTime=0x98e0c880, ftLastAccessTime.dwHighDateTime=0x1d5f0b6, ftLastWriteTime.dwLowDateTime=0x868ba73d, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x12460)) returned 1 [0114.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0114.848] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\rpzm0w8py7ceexd.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\RpZM0W8PY7CeeXD.pptx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\rpzm0w8py7ceexd.pptx.klavins")) returned 1 [0114.849] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv", lpFilePart=0x0) returned 0x33 [0114.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0114.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\ump4yyq84x7g.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.849] GetFileType (hFile=0x404) returned 0x1 [0114.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0114.849] GetFileType (hFile=0x404) returned 0x1 [0114.849] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0xb044 [0114.849] ReadFile (in: hFile=0x404, lpBuffer=0x259dd84, nNumberOfBytesToRead=0xb044, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x259dd84*, lpNumberOfBytesRead=0x4fe778*=0xb044, lpOverlapped=0x0) returned 1 [0114.851] CloseHandle (hObject=0x404) returned 1 [0114.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv", lpFilePart=0x0) returned 0x33 [0114.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0114.927] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\ump4yyq84x7g.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.929] GetFileType (hFile=0x404) returned 0x1 [0114.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0114.929] GetFileType (hFile=0x404) returned 0x1 [0114.930] WriteFile (in: hFile=0x404, lpBuffer=0x24178f0*, nNumberOfBytesToWrite=0xb050, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x24178f0*, lpNumberOfBytesWritten=0x4fe76c*=0xb050, lpOverlapped=0x0) returned 1 [0114.932] CloseHandle (hObject=0x404) returned 1 [0114.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv", lpFilePart=0x0) returned 0x33 [0114.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv.klavins", lpFilePart=0x0) returned 0x3b [0114.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0114.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\ump4yyq84x7g.csv"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d59c360, ftCreationTime.dwHighDateTime=0x1d5f014, ftLastAccessTime.dwLowDateTime=0x3a1cff00, ftLastAccessTime.dwHighDateTime=0x1d5e308, ftLastWriteTime.dwLowDateTime=0x86979643, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xb050)) returned 1 [0114.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0114.934] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\ump4yyq84x7g.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\umP4YYQ84x7G.csv.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\ump4yyq84x7g.csv.klavins")) returned 1 [0114.935] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls", lpFilePart=0x0) returned 0x35 [0114.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0114.935] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\vql upl-9nlyss.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.936] GetFileType (hFile=0x404) returned 0x1 [0114.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0114.936] GetFileType (hFile=0x404) returned 0x1 [0114.936] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x34ca [0114.936] ReadFile (in: hFile=0x404, lpBuffer=0x2422e0c, nNumberOfBytesToRead=0x34ca, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x2422e0c*, lpNumberOfBytesRead=0x4fe778*=0x34ca, lpOverlapped=0x0) returned 1 [0114.937] CloseHandle (hObject=0x404) returned 1 [0114.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0114.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0114.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0114.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0114.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls", lpFilePart=0x0) returned 0x35 [0114.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0114.961] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\vql upl-9nlyss.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.962] GetFileType (hFile=0x404) returned 0x1 [0114.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0114.963] GetFileType (hFile=0x404) returned 0x1 [0114.963] WriteFile (in: hFile=0x404, lpBuffer=0x2480564*, nNumberOfBytesToWrite=0x34d0, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x2480564*, lpNumberOfBytesWritten=0x4fe76c*=0x34d0, lpOverlapped=0x0) returned 1 [0114.964] CloseHandle (hObject=0x404) returned 1 [0114.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls", lpFilePart=0x0) returned 0x35 [0114.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls.klavins", lpFilePart=0x0) returned 0x3d [0114.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0114.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\vql upl-9nlyss.xls"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb539a70, ftCreationTime.dwHighDateTime=0x1d5e5b1, ftLastAccessTime.dwLowDateTime=0xdee85020, ftLastAccessTime.dwHighDateTime=0x1d5e385, ftLastWriteTime.dwLowDateTime=0x86a11a7f, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x34d0)) returned 1 [0114.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0114.989] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\vql upl-9nlyss.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\VqL UPl-9nlySS.xls.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\vql upl-9nlyss.xls.klavins")) returned 1 [0114.990] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf", lpFilePart=0x0) returned 0x3b [0114.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0114.990] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\wi5sqflmbdy3ijuvreh2.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0114.990] GetFileType (hFile=0x404) returned 0x1 [0114.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0114.990] GetFileType (hFile=0x404) returned 0x1 [0114.990] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0xc9e5 [0114.990] ReadFile (in: hFile=0x404, lpBuffer=0x2483f2c, nNumberOfBytesToRead=0xc9e5, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x2483f2c*, lpNumberOfBytesRead=0x4fe778*=0xc9e5, lpOverlapped=0x0) returned 1 [0114.992] CloseHandle (hObject=0x404) returned 1 [0115.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0115.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0115.023] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf", lpFilePart=0x0) returned 0x3b [0115.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0115.023] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\wi5sqflmbdy3ijuvreh2.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.025] GetFileType (hFile=0x404) returned 0x1 [0115.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0115.025] GetFileType (hFile=0x404) returned 0x1 [0115.025] WriteFile (in: hFile=0x404, lpBuffer=0x24f6afc*, nNumberOfBytesToWrite=0xc9f0, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x24f6afc*, lpNumberOfBytesWritten=0x4fe76c*=0xc9f0, lpOverlapped=0x0) returned 1 [0115.027] CloseHandle (hObject=0x404) returned 1 [0115.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf", lpFilePart=0x0) returned 0x3b [0115.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf.klavins", lpFilePart=0x0) returned 0x43 [0115.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0115.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\wi5sqflmbdy3ijuvreh2.rtf"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb1b3770, ftCreationTime.dwHighDateTime=0x1d5ed27, ftLastAccessTime.dwLowDateTime=0xc0ef0e40, ftLastAccessTime.dwHighDateTime=0x1d5e387, ftLastWriteTime.dwLowDateTime=0x86a5e04d, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xc9f0)) returned 1 [0115.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0115.030] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\wi5sqflmbdy3ijuvreh2.rtf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\WI5sqFLMbDy3IJuvREh2.rtf.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\wi5sqflmbdy3ijuvreh2.rtf.klavins")) returned 1 [0115.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx", lpFilePart=0x0) returned 0x39 [0115.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\x h8jy bf7dellms9.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.034] GetFileType (hFile=0x404) returned 0x1 [0115.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.034] GetFileType (hFile=0x404) returned 0x1 [0115.034] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x14a2 [0115.035] ReadFile (in: hFile=0x404, lpBuffer=0x2503a18, nNumberOfBytesToRead=0x14a2, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x2503a18*, lpNumberOfBytesRead=0x4fe778*=0x14a2, lpOverlapped=0x0) returned 1 [0115.036] CloseHandle (hObject=0x404) returned 1 [0115.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0115.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0115.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx", lpFilePart=0x0) returned 0x39 [0115.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0115.060] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\x h8jy bf7dellms9.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.061] GetFileType (hFile=0x404) returned 0x1 [0115.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0115.061] GetFileType (hFile=0x404) returned 0x1 [0115.061] WriteFile (in: hFile=0x404, lpBuffer=0x2556f74*, nNumberOfBytesToWrite=0x14b0, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x2556f74*, lpNumberOfBytesWritten=0x4fe76c*=0x14b0, lpOverlapped=0x0) returned 1 [0115.063] CloseHandle (hObject=0x404) returned 1 [0115.064] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx", lpFilePart=0x0) returned 0x39 [0115.064] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx.klavins", lpFilePart=0x0) returned 0x41 [0115.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0115.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\x h8jy bf7dellms9.pptx"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c36f1c0, ftCreationTime.dwHighDateTime=0x1d5e910, ftLastAccessTime.dwLowDateTime=0x1cb70580, ftLastAccessTime.dwHighDateTime=0x1d5e1e3, ftLastWriteTime.dwLowDateTime=0x86ad080a, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x14b0)) returned 1 [0115.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0115.065] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\x h8jy bf7dellms9.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Hk-3y4 Z\\x H8Jy Bf7dELLms9.pptx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\hk-3y4 z\\x h8jy bf7dellms9.pptx.klavins")) returned 1 [0115.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0115.066] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9", lpFilePart=0x0) returned 0x1e [0115.066] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd51c0c0, ftCreationTime.dwHighDateTime=0x1d5e74c, ftLastAccessTime.dwLowDateTime=0x6706c5f0, ftLastAccessTime.dwHighDateTime=0x1d5ea2e, ftLastWriteTime.dwLowDateTime=0x6706c5f0, ftLastWriteTime.dwHighDateTime=0x1d5ea2e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb150 [0115.066] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd51c0c0, ftCreationTime.dwHighDateTime=0x1d5e74c, ftLastAccessTime.dwLowDateTime=0x6706c5f0, ftLastAccessTime.dwHighDateTime=0x1d5ea2e, ftLastWriteTime.dwLowDateTime=0x6706c5f0, ftLastWriteTime.dwHighDateTime=0x1d5ea2e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.066] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2af828d0, ftCreationTime.dwHighDateTime=0x1d5eb5d, ftLastAccessTime.dwLowDateTime=0x4422a010, ftLastAccessTime.dwHighDateTime=0x1d5ea54, ftLastWriteTime.dwLowDateTime=0x4422a010, ftLastWriteTime.dwHighDateTime=0x1d5ea54, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x0, dwReserved1=0x0, cFileName="9ONW_4IE6I7M05C78uc.ods", cAlternateFileName="9ONW_4~1.ODS")) returned 1 [0115.067] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f6a490, ftCreationTime.dwHighDateTime=0x1d5ec8f, ftLastAccessTime.dwLowDateTime=0x539e84b0, ftLastAccessTime.dwHighDateTime=0x1d5ed28, ftLastWriteTime.dwLowDateTime=0x539e84b0, ftLastWriteTime.dwHighDateTime=0x1d5ed28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CKfW0B", cAlternateFileName="")) returned 1 [0115.067] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e488710, ftCreationTime.dwHighDateTime=0x1d5e5f1, ftLastAccessTime.dwLowDateTime=0xfd1f5bb0, ftLastAccessTime.dwHighDateTime=0x1d5eb41, ftLastWriteTime.dwLowDateTime=0xfd1f5bb0, ftLastWriteTime.dwHighDateTime=0x1d5eb41, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cKJStRzg4T", cAlternateFileName="CKJSTR~1")) returned 1 [0115.067] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87828360, ftCreationTime.dwHighDateTime=0x1d5e8c0, ftLastAccessTime.dwLowDateTime=0xab28bdb0, ftLastAccessTime.dwHighDateTime=0x1d5f0d2, ftLastWriteTime.dwLowDateTime=0xab28bdb0, ftLastWriteTime.dwHighDateTime=0x1d5f0d2, nFileSizeHigh=0x0, nFileSizeLow=0x7dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ih77vT8qXDGJqo.xlsx", cAlternateFileName="IH77VT~1.XLS")) returned 1 [0115.067] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1d6fd70, ftCreationTime.dwHighDateTime=0x1d5e3d3, ftLastAccessTime.dwLowDateTime=0x89002c60, ftLastAccessTime.dwHighDateTime=0x1d5e744, ftLastWriteTime.dwLowDateTime=0x89002c60, ftLastWriteTime.dwHighDateTime=0x1d5e744, nFileSizeHigh=0x0, nFileSizeLow=0x90f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="_kNwQIeg4R.xlsx", cAlternateFileName="_KNWQI~1.XLS")) returned 1 [0115.067] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.068] FindClose (in: hFindFile=0x7eb150 | out: hFindFile=0x7eb150) returned 1 [0115.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0115.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0115.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0115.068] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9", lpFilePart=0x0) returned 0x1e [0115.068] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd51c0c0, ftCreationTime.dwHighDateTime=0x1d5e74c, ftLastAccessTime.dwLowDateTime=0x6706c5f0, ftLastAccessTime.dwHighDateTime=0x1d5ea2e, ftLastWriteTime.dwLowDateTime=0x6706c5f0, ftLastWriteTime.dwHighDateTime=0x1d5ea2e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eadd0 [0115.068] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd51c0c0, ftCreationTime.dwHighDateTime=0x1d5e74c, ftLastAccessTime.dwLowDateTime=0x6706c5f0, ftLastAccessTime.dwHighDateTime=0x1d5ea2e, ftLastWriteTime.dwLowDateTime=0x6706c5f0, ftLastWriteTime.dwHighDateTime=0x1d5ea2e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.068] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2af828d0, ftCreationTime.dwHighDateTime=0x1d5eb5d, ftLastAccessTime.dwLowDateTime=0x4422a010, ftLastAccessTime.dwHighDateTime=0x1d5ea54, ftLastWriteTime.dwLowDateTime=0x4422a010, ftLastWriteTime.dwHighDateTime=0x1d5ea54, nFileSizeHigh=0x0, nFileSizeLow=0x1314, dwReserved0=0x0, dwReserved1=0x0, cFileName="9ONW_4IE6I7M05C78uc.ods", cAlternateFileName="9ONW_4~1.ODS")) returned 1 [0115.069] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f6a490, ftCreationTime.dwHighDateTime=0x1d5ec8f, ftLastAccessTime.dwLowDateTime=0x539e84b0, ftLastAccessTime.dwHighDateTime=0x1d5ed28, ftLastWriteTime.dwLowDateTime=0x539e84b0, ftLastWriteTime.dwHighDateTime=0x1d5ed28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CKfW0B", cAlternateFileName="")) returned 1 [0115.069] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e488710, ftCreationTime.dwHighDateTime=0x1d5e5f1, ftLastAccessTime.dwLowDateTime=0xfd1f5bb0, ftLastAccessTime.dwHighDateTime=0x1d5eb41, ftLastWriteTime.dwLowDateTime=0xfd1f5bb0, ftLastWriteTime.dwHighDateTime=0x1d5eb41, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cKJStRzg4T", cAlternateFileName="CKJSTR~1")) returned 1 [0115.069] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87828360, ftCreationTime.dwHighDateTime=0x1d5e8c0, ftLastAccessTime.dwLowDateTime=0xab28bdb0, ftLastAccessTime.dwHighDateTime=0x1d5f0d2, ftLastWriteTime.dwLowDateTime=0xab28bdb0, ftLastWriteTime.dwHighDateTime=0x1d5f0d2, nFileSizeHigh=0x0, nFileSizeLow=0x7dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ih77vT8qXDGJqo.xlsx", cAlternateFileName="IH77VT~1.XLS")) returned 1 [0115.069] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1d6fd70, ftCreationTime.dwHighDateTime=0x1d5e3d3, ftLastAccessTime.dwLowDateTime=0x89002c60, ftLastAccessTime.dwHighDateTime=0x1d5e744, ftLastWriteTime.dwLowDateTime=0x89002c60, ftLastWriteTime.dwHighDateTime=0x1d5e744, nFileSizeHigh=0x0, nFileSizeLow=0x90f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="_kNwQIeg4R.xlsx", cAlternateFileName="_KNWQI~1.XLS")) returned 1 [0115.070] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1d6fd70, ftCreationTime.dwHighDateTime=0x1d5e3d3, ftLastAccessTime.dwLowDateTime=0x89002c60, ftLastAccessTime.dwHighDateTime=0x1d5e744, ftLastWriteTime.dwLowDateTime=0x89002c60, ftLastWriteTime.dwHighDateTime=0x1d5e744, nFileSizeHigh=0x0, nFileSizeLow=0x90f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="_kNwQIeg4R.xlsx", cAlternateFileName="_KNWQI~1.XLS")) returned 0 [0115.070] FindClose (in: hFindFile=0x7eadd0 | out: hFindFile=0x7eadd0) returned 1 [0115.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0115.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0115.070] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx", lpFilePart=0x0) returned 0x32 [0115.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.070] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ih77vt8qxdgjqo.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.070] GetFileType (hFile=0x404) returned 0x1 [0115.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.070] GetFileType (hFile=0x404) returned 0x1 [0115.070] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x7dfa [0115.071] ReadFile (in: hFile=0x404, lpBuffer=0x255a258, nNumberOfBytesToRead=0x7dfa, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x255a258*, lpNumberOfBytesRead=0x4fe778*=0x7dfa, lpOverlapped=0x0) returned 1 [0115.072] CloseHandle (hObject=0x404) returned 1 [0115.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0115.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0115.158] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx", lpFilePart=0x0) returned 0x32 [0115.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0115.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ih77vt8qxdgjqo.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.160] GetFileType (hFile=0x404) returned 0x1 [0115.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0115.160] GetFileType (hFile=0x404) returned 0x1 [0115.160] WriteFile (in: hFile=0x404, lpBuffer=0x23d8b90*, nNumberOfBytesToWrite=0x7e00, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x23d8b90*, lpNumberOfBytesWritten=0x4fe76c*=0x7e00, lpOverlapped=0x0) returned 1 [0115.161] CloseHandle (hObject=0x404) returned 1 [0115.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx", lpFilePart=0x0) returned 0x32 [0115.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx.klavins", lpFilePart=0x0) returned 0x3a [0115.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0115.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ih77vt8qxdgjqo.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87828360, ftCreationTime.dwHighDateTime=0x1d5e8c0, ftLastAccessTime.dwLowDateTime=0xab28bdb0, ftLastAccessTime.dwHighDateTime=0x1d5f0d2, ftLastWriteTime.dwLowDateTime=0x86bb5661, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x7e00)) returned 1 [0115.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0115.169] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ih77vt8qxdgjqo.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\ih77vT8qXDGJqo.xlsx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ih77vt8qxdgjqo.xlsx.klavins")) returned 1 [0115.170] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx", lpFilePart=0x0) returned 0x2e [0115.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.170] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\_knwqieg4r.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.171] GetFileType (hFile=0x404) returned 0x1 [0115.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.171] GetFileType (hFile=0x404) returned 0x1 [0115.171] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x90f4 [0115.171] ReadFile (in: hFile=0x404, lpBuffer=0x23e0e4c, nNumberOfBytesToRead=0x90f4, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x23e0e4c*, lpNumberOfBytesRead=0x4fe778*=0x90f4, lpOverlapped=0x0) returned 1 [0115.173] CloseHandle (hObject=0x404) returned 1 [0115.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0115.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0115.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx", lpFilePart=0x0) returned 0x2e [0115.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0115.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\_knwqieg4r.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.338] GetFileType (hFile=0x404) returned 0x1 [0115.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0115.338] GetFileType (hFile=0x404) returned 0x1 [0115.338] WriteFile (in: hFile=0x404, lpBuffer=0x245b290*, nNumberOfBytesToWrite=0x9100, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x245b290*, lpNumberOfBytesWritten=0x4fe76c*=0x9100, lpOverlapped=0x0) returned 1 [0115.340] CloseHandle (hObject=0x404) returned 1 [0115.341] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx", lpFilePart=0x0) returned 0x2e [0115.341] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx.klavins", lpFilePart=0x0) returned 0x36 [0115.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0115.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\_knwqieg4r.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1d6fd70, ftCreationTime.dwHighDateTime=0x1d5e3d3, ftLastAccessTime.dwLowDateTime=0x89002c60, ftLastAccessTime.dwHighDateTime=0x1d5e744, ftLastWriteTime.dwLowDateTime=0x86d58e39, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x9100)) returned 1 [0115.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0115.342] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\_knwqieg4r.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\_kNwQIeg4R.xlsx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\_knwqieg4r.xlsx.klavins")) returned 1 [0115.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b0) returned 1 [0115.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B", nBufferLength=0x105, lpBuffer=0x4fe264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B", lpFilePart=0x0) returned 0x25 [0115.342] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\*", lpFindFileData=0x4fe4d8 | out: lpFindFileData=0x4fe4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f6a490, ftCreationTime.dwHighDateTime=0x1d5ec8f, ftLastAccessTime.dwLowDateTime=0x539e84b0, ftLastAccessTime.dwHighDateTime=0x1d5ed28, ftLastWriteTime.dwLowDateTime=0x539e84b0, ftLastWriteTime.dwHighDateTime=0x1d5ed28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eaf50 [0115.343] FindNextFileW (in: hFindFile=0x7eaf50, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f6a490, ftCreationTime.dwHighDateTime=0x1d5ec8f, ftLastAccessTime.dwLowDateTime=0x539e84b0, ftLastAccessTime.dwHighDateTime=0x1d5ed28, ftLastWriteTime.dwLowDateTime=0x539e84b0, ftLastWriteTime.dwHighDateTime=0x1d5ed28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.343] FindNextFileW (in: hFindFile=0x7eaf50, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776a8d0, ftCreationTime.dwHighDateTime=0x1d5e3f3, ftLastAccessTime.dwLowDateTime=0x6d824bf0, ftLastAccessTime.dwHighDateTime=0x1d5e4ef, ftLastWriteTime.dwLowDateTime=0x6d824bf0, ftLastWriteTime.dwHighDateTime=0x1d5e4ef, nFileSizeHigh=0x0, nFileSizeLow=0x5ae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0eFKcOxh Sm8 S9YH4xl.doc", cAlternateFileName="0EFKCO~1.DOC")) returned 1 [0115.343] FindNextFileW (in: hFindFile=0x7eaf50, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f1e0f0, ftCreationTime.dwHighDateTime=0x1d5f114, ftLastAccessTime.dwLowDateTime=0x34c48610, ftLastAccessTime.dwHighDateTime=0x1d5e1c1, ftLastWriteTime.dwLowDateTime=0x34c48610, ftLastWriteTime.dwHighDateTime=0x1d5e1c1, nFileSizeHigh=0x0, nFileSizeLow=0xa3cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ee6WGRBk.xls", cAlternateFileName="")) returned 1 [0115.344] FindNextFileW (in: hFindFile=0x7eaf50, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a4faa30, ftCreationTime.dwHighDateTime=0x1d5e278, ftLastAccessTime.dwLowDateTime=0x768e1280, ftLastAccessTime.dwHighDateTime=0x1d5e7ef, ftLastWriteTime.dwLowDateTime=0x768e1280, ftLastWriteTime.dwHighDateTime=0x1d5e7ef, nFileSizeHigh=0x0, nFileSizeLow=0xa934, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gk8AwiM1m5AaQm_T.xlsx", cAlternateFileName="GK8AWI~1.XLS")) returned 1 [0115.344] FindNextFileW (in: hFindFile=0x7eaf50, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce7310b0, ftCreationTime.dwHighDateTime=0x1d5ee41, ftLastAccessTime.dwLowDateTime=0x893c7380, ftLastAccessTime.dwHighDateTime=0x1d5f083, ftLastWriteTime.dwLowDateTime=0x893c7380, ftLastWriteTime.dwHighDateTime=0x1d5f083, nFileSizeHigh=0x0, nFileSizeLow=0xafa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="kddRGMgOJ8N0RrGo.csv", cAlternateFileName="KDDRGM~1.CSV")) returned 1 [0115.344] FindNextFileW (in: hFindFile=0x7eaf50, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56466e10, ftCreationTime.dwHighDateTime=0x1d5eee7, ftLastAccessTime.dwLowDateTime=0x558a38c0, ftLastAccessTime.dwHighDateTime=0x1d5e19b, ftLastWriteTime.dwLowDateTime=0x558a38c0, ftLastWriteTime.dwHighDateTime=0x1d5e19b, nFileSizeHigh=0x0, nFileSizeLow=0x2294, dwReserved0=0x0, dwReserved1=0x0, cFileName="LIOj1kQn.docx", cAlternateFileName="LIOJ1K~1.DOC")) returned 1 [0115.344] FindNextFileW (in: hFindFile=0x7eaf50, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604bbf50, ftCreationTime.dwHighDateTime=0x1d5e640, ftLastAccessTime.dwLowDateTime=0xfb024a80, ftLastAccessTime.dwHighDateTime=0x1d5e35e, ftLastWriteTime.dwLowDateTime=0xfb024a80, ftLastWriteTime.dwHighDateTime=0x1d5e35e, nFileSizeHigh=0x0, nFileSizeLow=0x16ab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="LxNUTk3Hkq.docx", cAlternateFileName="LXNUTK~1.DOC")) returned 1 [0115.344] FindNextFileW (in: hFindFile=0x7eaf50, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13626740, ftCreationTime.dwHighDateTime=0x1d5e553, ftLastAccessTime.dwLowDateTime=0xbda8a3a0, ftLastAccessTime.dwHighDateTime=0x1d5e2c8, ftLastWriteTime.dwLowDateTime=0xbda8a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e2c8, nFileSizeHigh=0x0, nFileSizeLow=0xa755, dwReserved0=0x0, dwReserved1=0x0, cFileName="VW2np9rlYH.ots", cAlternateFileName="VW2NP9~1.OTS")) returned 1 [0115.344] FindNextFileW (in: hFindFile=0x7eaf50, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80f36450, ftCreationTime.dwHighDateTime=0x1d5e82b, ftLastAccessTime.dwLowDateTime=0x2977bea0, ftLastAccessTime.dwHighDateTime=0x1d5edb3, ftLastWriteTime.dwLowDateTime=0x2977bea0, ftLastWriteTime.dwHighDateTime=0x1d5edb3, nFileSizeHigh=0x0, nFileSizeLow=0x10461, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiTQc-OuZensEQ12.csv", cAlternateFileName="WHITQC~1.CSV")) returned 1 [0115.344] FindNextFileW (in: hFindFile=0x7eaf50, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157320d0, ftCreationTime.dwHighDateTime=0x1d5ea1f, ftLastAccessTime.dwLowDateTime=0xa46fe620, ftLastAccessTime.dwHighDateTime=0x1d5ec85, ftLastWriteTime.dwLowDateTime=0xa46fe620, ftLastWriteTime.dwHighDateTime=0x1d5ec85, nFileSizeHigh=0x0, nFileSizeLow=0x1562e, dwReserved0=0x0, dwReserved1=0x0, cFileName="zeT5 XI_M1RbcaWaD-1x.odp", cAlternateFileName="ZET5XI~1.ODP")) returned 1 [0115.345] FindNextFileW (in: hFindFile=0x7eaf50, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517cbfd0, ftCreationTime.dwHighDateTime=0x1d5e459, ftLastAccessTime.dwLowDateTime=0x66856f30, ftLastAccessTime.dwHighDateTime=0x1d5f048, ftLastWriteTime.dwLowDateTime=0x66856f30, ftLastWriteTime.dwHighDateTime=0x1d5f048, nFileSizeHigh=0x0, nFileSizeLow=0x14521, dwReserved0=0x0, dwReserved1=0x0, cFileName="_j85r.ots", cAlternateFileName="")) returned 1 [0115.345] FindNextFileW (in: hFindFile=0x7eaf50, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.345] FindClose (in: hFindFile=0x7eaf50 | out: hFindFile=0x7eaf50) returned 1 [0115.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe76c) returned 1 [0115.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe778) returned 1 [0115.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b0) returned 1 [0115.345] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B", nBufferLength=0x105, lpBuffer=0x4fe264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B", lpFilePart=0x0) returned 0x25 [0115.345] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\*", lpFindFileData=0x4fe4d8 | out: lpFindFileData=0x4fe4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f6a490, ftCreationTime.dwHighDateTime=0x1d5ec8f, ftLastAccessTime.dwLowDateTime=0x539e84b0, ftLastAccessTime.dwHighDateTime=0x1d5ed28, ftLastWriteTime.dwLowDateTime=0x539e84b0, ftLastWriteTime.dwHighDateTime=0x1d5ed28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb310 [0115.345] FindNextFileW (in: hFindFile=0x7eb310, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12f6a490, ftCreationTime.dwHighDateTime=0x1d5ec8f, ftLastAccessTime.dwLowDateTime=0x539e84b0, ftLastAccessTime.dwHighDateTime=0x1d5ed28, ftLastWriteTime.dwLowDateTime=0x539e84b0, ftLastWriteTime.dwHighDateTime=0x1d5ed28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.346] FindNextFileW (in: hFindFile=0x7eb310, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776a8d0, ftCreationTime.dwHighDateTime=0x1d5e3f3, ftLastAccessTime.dwLowDateTime=0x6d824bf0, ftLastAccessTime.dwHighDateTime=0x1d5e4ef, ftLastWriteTime.dwLowDateTime=0x6d824bf0, ftLastWriteTime.dwHighDateTime=0x1d5e4ef, nFileSizeHigh=0x0, nFileSizeLow=0x5ae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0eFKcOxh Sm8 S9YH4xl.doc", cAlternateFileName="0EFKCO~1.DOC")) returned 1 [0115.346] FindNextFileW (in: hFindFile=0x7eb310, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f1e0f0, ftCreationTime.dwHighDateTime=0x1d5f114, ftLastAccessTime.dwLowDateTime=0x34c48610, ftLastAccessTime.dwHighDateTime=0x1d5e1c1, ftLastWriteTime.dwLowDateTime=0x34c48610, ftLastWriteTime.dwHighDateTime=0x1d5e1c1, nFileSizeHigh=0x0, nFileSizeLow=0xa3cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ee6WGRBk.xls", cAlternateFileName="")) returned 1 [0115.346] FindNextFileW (in: hFindFile=0x7eb310, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a4faa30, ftCreationTime.dwHighDateTime=0x1d5e278, ftLastAccessTime.dwLowDateTime=0x768e1280, ftLastAccessTime.dwHighDateTime=0x1d5e7ef, ftLastWriteTime.dwLowDateTime=0x768e1280, ftLastWriteTime.dwHighDateTime=0x1d5e7ef, nFileSizeHigh=0x0, nFileSizeLow=0xa934, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gk8AwiM1m5AaQm_T.xlsx", cAlternateFileName="GK8AWI~1.XLS")) returned 1 [0115.346] FindNextFileW (in: hFindFile=0x7eb310, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce7310b0, ftCreationTime.dwHighDateTime=0x1d5ee41, ftLastAccessTime.dwLowDateTime=0x893c7380, ftLastAccessTime.dwHighDateTime=0x1d5f083, ftLastWriteTime.dwLowDateTime=0x893c7380, ftLastWriteTime.dwHighDateTime=0x1d5f083, nFileSizeHigh=0x0, nFileSizeLow=0xafa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="kddRGMgOJ8N0RrGo.csv", cAlternateFileName="KDDRGM~1.CSV")) returned 1 [0115.346] FindNextFileW (in: hFindFile=0x7eb310, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56466e10, ftCreationTime.dwHighDateTime=0x1d5eee7, ftLastAccessTime.dwLowDateTime=0x558a38c0, ftLastAccessTime.dwHighDateTime=0x1d5e19b, ftLastWriteTime.dwLowDateTime=0x558a38c0, ftLastWriteTime.dwHighDateTime=0x1d5e19b, nFileSizeHigh=0x0, nFileSizeLow=0x2294, dwReserved0=0x0, dwReserved1=0x0, cFileName="LIOj1kQn.docx", cAlternateFileName="LIOJ1K~1.DOC")) returned 1 [0115.346] FindNextFileW (in: hFindFile=0x7eb310, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604bbf50, ftCreationTime.dwHighDateTime=0x1d5e640, ftLastAccessTime.dwLowDateTime=0xfb024a80, ftLastAccessTime.dwHighDateTime=0x1d5e35e, ftLastWriteTime.dwLowDateTime=0xfb024a80, ftLastWriteTime.dwHighDateTime=0x1d5e35e, nFileSizeHigh=0x0, nFileSizeLow=0x16ab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="LxNUTk3Hkq.docx", cAlternateFileName="LXNUTK~1.DOC")) returned 1 [0115.347] FindNextFileW (in: hFindFile=0x7eb310, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13626740, ftCreationTime.dwHighDateTime=0x1d5e553, ftLastAccessTime.dwLowDateTime=0xbda8a3a0, ftLastAccessTime.dwHighDateTime=0x1d5e2c8, ftLastWriteTime.dwLowDateTime=0xbda8a3a0, ftLastWriteTime.dwHighDateTime=0x1d5e2c8, nFileSizeHigh=0x0, nFileSizeLow=0xa755, dwReserved0=0x0, dwReserved1=0x0, cFileName="VW2np9rlYH.ots", cAlternateFileName="VW2NP9~1.OTS")) returned 1 [0115.347] FindNextFileW (in: hFindFile=0x7eb310, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80f36450, ftCreationTime.dwHighDateTime=0x1d5e82b, ftLastAccessTime.dwLowDateTime=0x2977bea0, ftLastAccessTime.dwHighDateTime=0x1d5edb3, ftLastWriteTime.dwLowDateTime=0x2977bea0, ftLastWriteTime.dwHighDateTime=0x1d5edb3, nFileSizeHigh=0x0, nFileSizeLow=0x10461, dwReserved0=0x0, dwReserved1=0x0, cFileName="whiTQc-OuZensEQ12.csv", cAlternateFileName="WHITQC~1.CSV")) returned 1 [0115.347] FindNextFileW (in: hFindFile=0x7eb310, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157320d0, ftCreationTime.dwHighDateTime=0x1d5ea1f, ftLastAccessTime.dwLowDateTime=0xa46fe620, ftLastAccessTime.dwHighDateTime=0x1d5ec85, ftLastWriteTime.dwLowDateTime=0xa46fe620, ftLastWriteTime.dwHighDateTime=0x1d5ec85, nFileSizeHigh=0x0, nFileSizeLow=0x1562e, dwReserved0=0x0, dwReserved1=0x0, cFileName="zeT5 XI_M1RbcaWaD-1x.odp", cAlternateFileName="ZET5XI~1.ODP")) returned 1 [0115.347] FindNextFileW (in: hFindFile=0x7eb310, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517cbfd0, ftCreationTime.dwHighDateTime=0x1d5e459, ftLastAccessTime.dwLowDateTime=0x66856f30, ftLastAccessTime.dwHighDateTime=0x1d5f048, ftLastWriteTime.dwLowDateTime=0x66856f30, ftLastWriteTime.dwHighDateTime=0x1d5f048, nFileSizeHigh=0x0, nFileSizeLow=0x14521, dwReserved0=0x0, dwReserved1=0x0, cFileName="_j85r.ots", cAlternateFileName="")) returned 1 [0115.347] FindNextFileW (in: hFindFile=0x7eb310, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517cbfd0, ftCreationTime.dwHighDateTime=0x1d5e459, ftLastAccessTime.dwLowDateTime=0x66856f30, ftLastAccessTime.dwHighDateTime=0x1d5f048, ftLastWriteTime.dwLowDateTime=0x66856f30, ftLastWriteTime.dwHighDateTime=0x1d5f048, nFileSizeHigh=0x0, nFileSizeLow=0x14521, dwReserved0=0x0, dwReserved1=0x0, cFileName="_j85r.ots", cAlternateFileName="")) returned 0 [0115.347] FindClose (in: hFindFile=0x7eb310 | out: hFindFile=0x7eb310) returned 1 [0115.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe76c) returned 1 [0115.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe778) returned 1 [0115.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc", lpFilePart=0x0) returned 0x3e [0115.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.348] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\0efkcoxh sm8 s9yh4xl.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.348] GetFileType (hFile=0x404) returned 0x1 [0115.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.348] GetFileType (hFile=0x404) returned 0x1 [0115.348] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x5ae4 [0115.348] ReadFile (in: hFile=0x404, lpBuffer=0x2467380, nNumberOfBytesToRead=0x5ae4, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x2467380*, lpNumberOfBytesRead=0x4fe704*=0x5ae4, lpOverlapped=0x0) returned 1 [0115.349] CloseHandle (hObject=0x404) returned 1 [0115.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc", lpFilePart=0x0) returned 0x3e [0115.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.366] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\0efkcoxh sm8 s9yh4xl.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.367] GetFileType (hFile=0x404) returned 0x1 [0115.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.367] GetFileType (hFile=0x404) returned 0x1 [0115.367] WriteFile (in: hFile=0x404, lpBuffer=0x24d0818*, nNumberOfBytesToWrite=0x5af0, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x24d0818*, lpNumberOfBytesWritten=0x4fe6f8*=0x5af0, lpOverlapped=0x0) returned 1 [0115.369] CloseHandle (hObject=0x404) returned 1 [0115.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc", lpFilePart=0x0) returned 0x3e [0115.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc.klavins", lpFilePart=0x0) returned 0x46 [0115.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\0efkcoxh sm8 s9yh4xl.doc"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776a8d0, ftCreationTime.dwHighDateTime=0x1d5e3f3, ftLastAccessTime.dwLowDateTime=0x6d824bf0, ftLastAccessTime.dwHighDateTime=0x1d5e4ef, ftLastWriteTime.dwLowDateTime=0x86da5481, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x5af0)) returned 1 [0115.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.371] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\0efkcoxh sm8 s9yh4xl.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\0eFKcOxh Sm8 S9YH4xl.doc.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\0efkcoxh sm8 s9yh4xl.doc.klavins")) returned 1 [0115.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls", lpFilePart=0x0) returned 0x32 [0115.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.372] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\ee6wgrbk.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.372] GetFileType (hFile=0x404) returned 0x1 [0115.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.372] GetFileType (hFile=0x404) returned 0x1 [0115.372] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0xa3cf [0115.372] ReadFile (in: hFile=0x404, lpBuffer=0x24d6834, nNumberOfBytesToRead=0xa3cf, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x24d6834*, lpNumberOfBytesRead=0x4fe704*=0xa3cf, lpOverlapped=0x0) returned 1 [0115.373] CloseHandle (hObject=0x404) returned 1 [0115.417] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.418] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls", lpFilePart=0x0) returned 0x32 [0115.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\ee6wgrbk.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.419] GetFileType (hFile=0x404) returned 0x1 [0115.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.419] GetFileType (hFile=0x404) returned 0x1 [0115.419] WriteFile (in: hFile=0x404, lpBuffer=0x2556930*, nNumberOfBytesToWrite=0xa3d0, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x2556930*, lpNumberOfBytesWritten=0x4fe6f8*=0xa3d0, lpOverlapped=0x0) returned 1 [0115.421] CloseHandle (hObject=0x404) returned 1 [0115.423] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls", lpFilePart=0x0) returned 0x32 [0115.423] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls.klavins", lpFilePart=0x0) returned 0x3a [0115.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\ee6wgrbk.xls"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5f1e0f0, ftCreationTime.dwHighDateTime=0x1d5f114, ftLastAccessTime.dwLowDateTime=0x34c48610, ftLastAccessTime.dwHighDateTime=0x1d5e1c1, ftLastWriteTime.dwLowDateTime=0x86e3ddf4, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xa3d0)) returned 1 [0115.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.423] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\ee6wgrbk.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\ee6WGRBk.xls.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\ee6wgrbk.xls.klavins")) returned 1 [0115.424] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx", lpFilePart=0x0) returned 0x3b [0115.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.424] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\gk8awim1m5aaqm_t.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.424] GetFileType (hFile=0x404) returned 0x1 [0115.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.424] GetFileType (hFile=0x404) returned 0x1 [0115.424] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0xa934 [0115.424] ReadFile (in: hFile=0x404, lpBuffer=0x25611d4, nNumberOfBytesToRead=0xa934, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x25611d4*, lpNumberOfBytesRead=0x4fe704*=0xa934, lpOverlapped=0x0) returned 1 [0115.426] CloseHandle (hObject=0x404) returned 1 [0115.455] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.455] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx", lpFilePart=0x0) returned 0x3b [0115.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.456] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\gk8awim1m5aaqm_t.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.457] GetFileType (hFile=0x404) returned 0x1 [0115.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.457] GetFileType (hFile=0x404) returned 0x1 [0115.457] WriteFile (in: hFile=0x404, lpBuffer=0x25cdb90*, nNumberOfBytesToWrite=0xa940, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x25cdb90*, lpNumberOfBytesWritten=0x4fe6f8*=0xa940, lpOverlapped=0x0) returned 1 [0115.459] CloseHandle (hObject=0x404) returned 1 [0115.464] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx", lpFilePart=0x0) returned 0x3b [0115.464] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx.klavins", lpFilePart=0x0) returned 0x43 [0115.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\gk8awim1m5aaqm_t.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a4faa30, ftCreationTime.dwHighDateTime=0x1d5e278, ftLastAccessTime.dwLowDateTime=0x768e1280, ftLastAccessTime.dwHighDateTime=0x1d5e7ef, ftLastWriteTime.dwLowDateTime=0x86e8a308, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xa940)) returned 1 [0115.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.464] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\gk8awim1m5aaqm_t.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\Gk8AwiM1m5AaQm_T.xlsx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\gk8awim1m5aaqm_t.xlsx.klavins")) returned 1 [0115.465] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv", lpFilePart=0x0) returned 0x3a [0115.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.465] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\kddrgmgoj8n0rrgo.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.465] GetFileType (hFile=0x404) returned 0x1 [0115.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.465] GetFileType (hFile=0x404) returned 0x1 [0115.465] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0xafa4 [0115.468] ReadFile (in: hFile=0x404, lpBuffer=0x23d931c, nNumberOfBytesToRead=0xafa4, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x23d931c*, lpNumberOfBytesRead=0x4fe704*=0xafa4, lpOverlapped=0x0) returned 1 [0115.470] CloseHandle (hObject=0x404) returned 1 [0115.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv", lpFilePart=0x0) returned 0x3a [0115.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.524] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\kddrgmgoj8n0rrgo.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.526] GetFileType (hFile=0x404) returned 0x1 [0115.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.526] GetFileType (hFile=0x404) returned 0x1 [0115.526] WriteFile (in: hFile=0x404, lpBuffer=0x2447184*, nNumberOfBytesToWrite=0xafb0, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x2447184*, lpNumberOfBytesWritten=0x4fe6f8*=0xafb0, lpOverlapped=0x0) returned 1 [0115.528] CloseHandle (hObject=0x404) returned 1 [0115.530] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv", lpFilePart=0x0) returned 0x3a [0115.530] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv.klavins", lpFilePart=0x0) returned 0x42 [0115.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\kddrgmgoj8n0rrgo.csv"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce7310b0, ftCreationTime.dwHighDateTime=0x1d5ee41, ftLastAccessTime.dwLowDateTime=0x893c7380, ftLastAccessTime.dwHighDateTime=0x1d5f083, ftLastWriteTime.dwLowDateTime=0x86f23064, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xafb0)) returned 1 [0115.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.530] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\kddrgmgoj8n0rrgo.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\kddRGMgOJ8N0RrGo.csv.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\kddrgmgoj8n0rrgo.csv.klavins")) returned 1 [0115.532] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx", lpFilePart=0x0) returned 0x33 [0115.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.532] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\lioj1kqn.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.532] GetFileType (hFile=0x404) returned 0x1 [0115.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.532] GetFileType (hFile=0x404) returned 0x1 [0115.532] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x2294 [0115.532] ReadFile (in: hFile=0x404, lpBuffer=0x2452638, nNumberOfBytesToRead=0x2294, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x2452638*, lpNumberOfBytesRead=0x4fe704*=0x2294, lpOverlapped=0x0) returned 1 [0115.533] CloseHandle (hObject=0x404) returned 1 [0115.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx", lpFilePart=0x0) returned 0x33 [0115.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\lioj1kqn.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.551] GetFileType (hFile=0x404) returned 0x1 [0115.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.551] GetFileType (hFile=0x404) returned 0x1 [0115.552] WriteFile (in: hFile=0x404, lpBuffer=0x24aa140*, nNumberOfBytesToWrite=0x22a0, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x24aa140*, lpNumberOfBytesWritten=0x4fe6f8*=0x22a0, lpOverlapped=0x0) returned 1 [0115.553] CloseHandle (hObject=0x404) returned 1 [0115.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx", lpFilePart=0x0) returned 0x33 [0115.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx.klavins", lpFilePart=0x0) returned 0x3b [0115.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\lioj1kqn.docx"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56466e10, ftCreationTime.dwHighDateTime=0x1d5eee7, ftLastAccessTime.dwLowDateTime=0x558a38c0, ftLastAccessTime.dwHighDateTime=0x1d5e19b, ftLastWriteTime.dwLowDateTime=0x86f6f144, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x22a0)) returned 1 [0115.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.555] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\lioj1kqn.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LIOj1kQn.docx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\lioj1kqn.docx.klavins")) returned 1 [0115.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx", lpFilePart=0x0) returned 0x35 [0115.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.556] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\lxnutk3hkq.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.556] GetFileType (hFile=0x404) returned 0x1 [0115.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.556] GetFileType (hFile=0x404) returned 0x1 [0115.556] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x16ab5 [0115.556] ReadFile (in: hFile=0x404, lpBuffer=0x363e460, nNumberOfBytesToRead=0x16ab5, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x363e460*, lpNumberOfBytesRead=0x4fe704*=0x16ab5, lpOverlapped=0x0) returned 1 [0115.558] CloseHandle (hObject=0x404) returned 1 [0115.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx", lpFilePart=0x0) returned 0x35 [0115.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.586] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\lxnutk3hkq.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.588] GetFileType (hFile=0x404) returned 0x1 [0115.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.588] GetFileType (hFile=0x404) returned 0x1 [0115.588] WriteFile (in: hFile=0x404, lpBuffer=0x3654f38*, nNumberOfBytesToWrite=0x16ac0, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x3654f38*, lpNumberOfBytesWritten=0x4fe6f8*=0x16ac0, lpOverlapped=0x0) returned 1 [0115.591] CloseHandle (hObject=0x404) returned 1 [0115.596] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx", lpFilePart=0x0) returned 0x35 [0115.596] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx.klavins", lpFilePart=0x0) returned 0x3d [0115.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\lxnutk3hkq.docx"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604bbf50, ftCreationTime.dwHighDateTime=0x1d5e640, ftLastAccessTime.dwLowDateTime=0xfb024a80, ftLastAccessTime.dwHighDateTime=0x1d5e35e, ftLastWriteTime.dwLowDateTime=0x86fe8847, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x16ac0)) returned 1 [0115.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.597] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\lxnutk3hkq.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\LxNUTk3Hkq.docx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\lxnutk3hkq.docx.klavins")) returned 1 [0115.597] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv", lpFilePart=0x0) returned 0x3b [0115.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.598] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\whitqc-ouzenseq12.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.598] GetFileType (hFile=0x404) returned 0x1 [0115.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.598] GetFileType (hFile=0x404) returned 0x1 [0115.598] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x10461 [0115.598] ReadFile (in: hFile=0x404, lpBuffer=0x23b4a78, nNumberOfBytesToRead=0x10461, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x23b4a78*, lpNumberOfBytesRead=0x4fe704*=0x10461, lpOverlapped=0x0) returned 1 [0115.599] CloseHandle (hObject=0x404) returned 1 [0115.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv", lpFilePart=0x0) returned 0x3b [0115.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\whitqc-ouzenseq12.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.653] GetFileType (hFile=0x404) returned 0x1 [0115.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.653] GetFileType (hFile=0x404) returned 0x1 [0115.654] WriteFile (in: hFile=0x404, lpBuffer=0x2432724*, nNumberOfBytesToWrite=0x10470, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x2432724*, lpNumberOfBytesWritten=0x4fe6f8*=0x10470, lpOverlapped=0x0) returned 1 [0115.656] CloseHandle (hObject=0x404) returned 1 [0115.659] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv", lpFilePart=0x0) returned 0x3b [0115.659] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv.klavins", lpFilePart=0x0) returned 0x43 [0115.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\whitqc-ouzenseq12.csv"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80f36450, ftCreationTime.dwHighDateTime=0x1d5e82b, ftLastAccessTime.dwLowDateTime=0x2977bea0, ftLastAccessTime.dwHighDateTime=0x1d5edb3, ftLastWriteTime.dwLowDateTime=0x8707a30e, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10470)) returned 1 [0115.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.659] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\whitqc-ouzenseq12.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\CKfW0B\\whiTQc-OuZensEQ12.csv.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckfw0b\\whitqc-ouzenseq12.csv.klavins")) returned 1 [0115.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b0) returned 1 [0115.660] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T", nBufferLength=0x105, lpBuffer=0x4fe264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T", lpFilePart=0x0) returned 0x29 [0115.660] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\*", lpFindFileData=0x4fe4d8 | out: lpFindFileData=0x4fe4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e488710, ftCreationTime.dwHighDateTime=0x1d5e5f1, ftLastAccessTime.dwLowDateTime=0xfd1f5bb0, ftLastAccessTime.dwHighDateTime=0x1d5eb41, ftLastWriteTime.dwLowDateTime=0xfd1f5bb0, ftLastWriteTime.dwHighDateTime=0x1d5eb41, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb490 [0115.661] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e488710, ftCreationTime.dwHighDateTime=0x1d5e5f1, ftLastAccessTime.dwLowDateTime=0xfd1f5bb0, ftLastAccessTime.dwHighDateTime=0x1d5eb41, ftLastWriteTime.dwLowDateTime=0xfd1f5bb0, ftLastWriteTime.dwHighDateTime=0x1d5eb41, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.661] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8f1d0, ftCreationTime.dwHighDateTime=0x1d5eb4f, ftLastAccessTime.dwLowDateTime=0xf2dc3fa0, ftLastAccessTime.dwHighDateTime=0x1d5e188, ftLastWriteTime.dwLowDateTime=0xf2dc3fa0, ftLastWriteTime.dwHighDateTime=0x1d5e188, nFileSizeHigh=0x0, nFileSizeLow=0x114e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="8FzSi5o3TiguB2wUbf.odp", cAlternateFileName="8FZSI5~1.ODP")) returned 1 [0115.661] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc438cf60, ftCreationTime.dwHighDateTime=0x1d5ef2a, ftLastAccessTime.dwLowDateTime=0xf251ee40, ftLastAccessTime.dwHighDateTime=0x1d5f060, ftLastWriteTime.dwLowDateTime=0xf251ee40, ftLastWriteTime.dwHighDateTime=0x1d5f060, nFileSizeHigh=0x0, nFileSizeLow=0x173d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eg1_.xlsx", cAlternateFileName="EG1_~1.XLS")) returned 1 [0115.661] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde2e02c0, ftCreationTime.dwHighDateTime=0x1d5f068, ftLastAccessTime.dwLowDateTime=0xeee8f3c0, ftLastAccessTime.dwHighDateTime=0x1d5e88b, ftLastWriteTime.dwLowDateTime=0xeee8f3c0, ftLastWriteTime.dwHighDateTime=0x1d5e88b, nFileSizeHigh=0x0, nFileSizeLow=0x82bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="fOYUV97.doc", cAlternateFileName="")) returned 1 [0115.661] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf823d00, ftCreationTime.dwHighDateTime=0x1d5e634, ftLastAccessTime.dwLowDateTime=0x2f0f5620, ftLastAccessTime.dwHighDateTime=0x1d5e999, ftLastWriteTime.dwLowDateTime=0x2f0f5620, ftLastWriteTime.dwHighDateTime=0x1d5e999, nFileSizeHigh=0x0, nFileSizeLow=0x18a23, dwReserved0=0x0, dwReserved1=0x0, cFileName="jSfdGzcY5.rtf", cAlternateFileName="JSFDGZ~1.RTF")) returned 1 [0115.661] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacfb08b0, ftCreationTime.dwHighDateTime=0x1d5ee8d, ftLastAccessTime.dwLowDateTime=0xdabaad30, ftLastAccessTime.dwHighDateTime=0x1d5e610, ftLastWriteTime.dwLowDateTime=0xdabaad30, ftLastWriteTime.dwHighDateTime=0x1d5e610, nFileSizeHigh=0x0, nFileSizeLow=0x1772b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KX fS3.pdf", cAlternateFileName="KXFS3~1.PDF")) returned 1 [0115.661] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a29fc0, ftCreationTime.dwHighDateTime=0x1d5e781, ftLastAccessTime.dwLowDateTime=0xb67bce40, ftLastAccessTime.dwHighDateTime=0x1d5e773, ftLastWriteTime.dwLowDateTime=0xb67bce40, ftLastWriteTime.dwHighDateTime=0x1d5e773, nFileSizeHigh=0x0, nFileSizeLow=0x1ab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="orp-H_0BxF_vJR.odt", cAlternateFileName="ORP-H_~1.ODT")) returned 1 [0115.662] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9b8b410, ftCreationTime.dwHighDateTime=0x1d5e0e7, ftLastAccessTime.dwLowDateTime=0x6f19b00, ftLastAccessTime.dwHighDateTime=0x1d5e6f9, ftLastWriteTime.dwLowDateTime=0x6f19b00, ftLastWriteTime.dwHighDateTime=0x1d5e6f9, nFileSizeHigh=0x0, nFileSizeLow=0x16176, dwReserved0=0x0, dwReserved1=0x0, cFileName="uhwb29d8q-8p81g9.odp", cAlternateFileName="UHWB29~1.ODP")) returned 1 [0115.662] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604f78e0, ftCreationTime.dwHighDateTime=0x1d5f101, ftLastAccessTime.dwLowDateTime=0xc39f5390, ftLastAccessTime.dwHighDateTime=0x1d5ee2f, ftLastWriteTime.dwLowDateTime=0xc39f5390, ftLastWriteTime.dwHighDateTime=0x1d5ee2f, nFileSizeHigh=0x0, nFileSizeLow=0x102cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="vSK6QtK2.doc", cAlternateFileName="")) returned 1 [0115.662] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf308f30, ftCreationTime.dwHighDateTime=0x1d5e85f, ftLastAccessTime.dwLowDateTime=0xf048c2e0, ftLastAccessTime.dwHighDateTime=0x1d5e6bf, ftLastWriteTime.dwLowDateTime=0xf048c2e0, ftLastWriteTime.dwHighDateTime=0x1d5e6bf, nFileSizeHigh=0x0, nFileSizeLow=0x11d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="X FfshG7EUi456.pps", cAlternateFileName="XFFSHG~1.PPS")) returned 1 [0115.662] FindNextFileW (in: hFindFile=0x7eb490, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.662] FindClose (in: hFindFile=0x7eb490 | out: hFindFile=0x7eb490) returned 1 [0115.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe76c) returned 1 [0115.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe778) returned 1 [0115.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b0) returned 1 [0115.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T", nBufferLength=0x105, lpBuffer=0x4fe264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T", lpFilePart=0x0) returned 0x29 [0115.662] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\*", lpFindFileData=0x4fe4d8 | out: lpFindFileData=0x4fe4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e488710, ftCreationTime.dwHighDateTime=0x1d5e5f1, ftLastAccessTime.dwLowDateTime=0xfd1f5bb0, ftLastAccessTime.dwHighDateTime=0x1d5eb41, ftLastWriteTime.dwLowDateTime=0xfd1f5bb0, ftLastWriteTime.dwHighDateTime=0x1d5eb41, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb450 [0115.663] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e488710, ftCreationTime.dwHighDateTime=0x1d5e5f1, ftLastAccessTime.dwLowDateTime=0xfd1f5bb0, ftLastAccessTime.dwHighDateTime=0x1d5eb41, ftLastWriteTime.dwLowDateTime=0xfd1f5bb0, ftLastWriteTime.dwHighDateTime=0x1d5eb41, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.663] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8f1d0, ftCreationTime.dwHighDateTime=0x1d5eb4f, ftLastAccessTime.dwLowDateTime=0xf2dc3fa0, ftLastAccessTime.dwHighDateTime=0x1d5e188, ftLastWriteTime.dwLowDateTime=0xf2dc3fa0, ftLastWriteTime.dwHighDateTime=0x1d5e188, nFileSizeHigh=0x0, nFileSizeLow=0x114e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="8FzSi5o3TiguB2wUbf.odp", cAlternateFileName="8FZSI5~1.ODP")) returned 1 [0115.663] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc438cf60, ftCreationTime.dwHighDateTime=0x1d5ef2a, ftLastAccessTime.dwLowDateTime=0xf251ee40, ftLastAccessTime.dwHighDateTime=0x1d5f060, ftLastWriteTime.dwLowDateTime=0xf251ee40, ftLastWriteTime.dwHighDateTime=0x1d5f060, nFileSizeHigh=0x0, nFileSizeLow=0x173d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eg1_.xlsx", cAlternateFileName="EG1_~1.XLS")) returned 1 [0115.663] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde2e02c0, ftCreationTime.dwHighDateTime=0x1d5f068, ftLastAccessTime.dwLowDateTime=0xeee8f3c0, ftLastAccessTime.dwHighDateTime=0x1d5e88b, ftLastWriteTime.dwLowDateTime=0xeee8f3c0, ftLastWriteTime.dwHighDateTime=0x1d5e88b, nFileSizeHigh=0x0, nFileSizeLow=0x82bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="fOYUV97.doc", cAlternateFileName="")) returned 1 [0115.663] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf823d00, ftCreationTime.dwHighDateTime=0x1d5e634, ftLastAccessTime.dwLowDateTime=0x2f0f5620, ftLastAccessTime.dwHighDateTime=0x1d5e999, ftLastWriteTime.dwLowDateTime=0x2f0f5620, ftLastWriteTime.dwHighDateTime=0x1d5e999, nFileSizeHigh=0x0, nFileSizeLow=0x18a23, dwReserved0=0x0, dwReserved1=0x0, cFileName="jSfdGzcY5.rtf", cAlternateFileName="JSFDGZ~1.RTF")) returned 1 [0115.663] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacfb08b0, ftCreationTime.dwHighDateTime=0x1d5ee8d, ftLastAccessTime.dwLowDateTime=0xdabaad30, ftLastAccessTime.dwHighDateTime=0x1d5e610, ftLastWriteTime.dwLowDateTime=0xdabaad30, ftLastWriteTime.dwHighDateTime=0x1d5e610, nFileSizeHigh=0x0, nFileSizeLow=0x1772b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KX fS3.pdf", cAlternateFileName="KXFS3~1.PDF")) returned 1 [0115.664] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a29fc0, ftCreationTime.dwHighDateTime=0x1d5e781, ftLastAccessTime.dwLowDateTime=0xb67bce40, ftLastAccessTime.dwHighDateTime=0x1d5e773, ftLastWriteTime.dwLowDateTime=0xb67bce40, ftLastWriteTime.dwHighDateTime=0x1d5e773, nFileSizeHigh=0x0, nFileSizeLow=0x1ab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="orp-H_0BxF_vJR.odt", cAlternateFileName="ORP-H_~1.ODT")) returned 1 [0115.664] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9b8b410, ftCreationTime.dwHighDateTime=0x1d5e0e7, ftLastAccessTime.dwLowDateTime=0x6f19b00, ftLastAccessTime.dwHighDateTime=0x1d5e6f9, ftLastWriteTime.dwLowDateTime=0x6f19b00, ftLastWriteTime.dwHighDateTime=0x1d5e6f9, nFileSizeHigh=0x0, nFileSizeLow=0x16176, dwReserved0=0x0, dwReserved1=0x0, cFileName="uhwb29d8q-8p81g9.odp", cAlternateFileName="UHWB29~1.ODP")) returned 1 [0115.664] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604f78e0, ftCreationTime.dwHighDateTime=0x1d5f101, ftLastAccessTime.dwLowDateTime=0xc39f5390, ftLastAccessTime.dwHighDateTime=0x1d5ee2f, ftLastWriteTime.dwLowDateTime=0xc39f5390, ftLastWriteTime.dwHighDateTime=0x1d5ee2f, nFileSizeHigh=0x0, nFileSizeLow=0x102cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="vSK6QtK2.doc", cAlternateFileName="")) returned 1 [0115.664] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf308f30, ftCreationTime.dwHighDateTime=0x1d5e85f, ftLastAccessTime.dwLowDateTime=0xf048c2e0, ftLastAccessTime.dwHighDateTime=0x1d5e6bf, ftLastWriteTime.dwLowDateTime=0xf048c2e0, ftLastWriteTime.dwHighDateTime=0x1d5e6bf, nFileSizeHigh=0x0, nFileSizeLow=0x11d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="X FfshG7EUi456.pps", cAlternateFileName="XFFSHG~1.PPS")) returned 1 [0115.664] FindNextFileW (in: hFindFile=0x7eb450, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf308f30, ftCreationTime.dwHighDateTime=0x1d5e85f, ftLastAccessTime.dwLowDateTime=0xf048c2e0, ftLastAccessTime.dwHighDateTime=0x1d5e6bf, ftLastWriteTime.dwLowDateTime=0xf048c2e0, ftLastWriteTime.dwHighDateTime=0x1d5e6bf, nFileSizeHigh=0x0, nFileSizeLow=0x11d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="X FfshG7EUi456.pps", cAlternateFileName="XFFSHG~1.PPS")) returned 0 [0115.664] FindClose (in: hFindFile=0x7eb450 | out: hFindFile=0x7eb450) returned 1 [0115.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe76c) returned 1 [0115.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe778) returned 1 [0115.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx", lpFilePart=0x0) returned 0x33 [0115.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.665] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\eg1_.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.665] GetFileType (hFile=0x404) returned 0x1 [0115.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.665] GetFileType (hFile=0x404) returned 0x1 [0115.665] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x173d0 [0115.665] ReadFile (in: hFile=0x404, lpBuffer=0x33c2328, nNumberOfBytesToRead=0x173d0, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x33c2328*, lpNumberOfBytesRead=0x4fe704*=0x173d0, lpOverlapped=0x0) returned 1 [0115.667] CloseHandle (hObject=0x404) returned 1 [0115.686] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.687] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx", lpFilePart=0x0) returned 0x33 [0115.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.687] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\eg1_.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.689] GetFileType (hFile=0x404) returned 0x1 [0115.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.689] GetFileType (hFile=0x404) returned 0x1 [0115.689] WriteFile (in: hFile=0x404, lpBuffer=0x34366b8*, nNumberOfBytesToWrite=0x173e0, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x34366b8*, lpNumberOfBytesWritten=0x4fe6f8*=0x173e0, lpOverlapped=0x0) returned 1 [0115.691] CloseHandle (hObject=0x404) returned 1 [0115.694] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx", lpFilePart=0x0) returned 0x33 [0115.694] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx.klavins", lpFilePart=0x0) returned 0x3b [0115.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\eg1_.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc438cf60, ftCreationTime.dwHighDateTime=0x1d5ef2a, ftLastAccessTime.dwLowDateTime=0xf251ee40, ftLastAccessTime.dwHighDateTime=0x1d5f060, ftLastWriteTime.dwLowDateTime=0x870c65c4, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x173e0)) returned 1 [0115.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.694] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\eg1_.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\Eg1_.xlsx.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\eg1_.xlsx.klavins")) returned 1 [0115.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc", lpFilePart=0x0) returned 0x35 [0115.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.695] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\foyuv97.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.695] GetFileType (hFile=0x404) returned 0x1 [0115.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.695] GetFileType (hFile=0x404) returned 0x1 [0115.695] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x82bd [0115.695] ReadFile (in: hFile=0x404, lpBuffer=0x2492c94, nNumberOfBytesToRead=0x82bd, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x2492c94*, lpNumberOfBytesRead=0x4fe704*=0x82bd, lpOverlapped=0x0) returned 1 [0115.697] CloseHandle (hObject=0x404) returned 1 [0115.715] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.716] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc", lpFilePart=0x0) returned 0x35 [0115.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.716] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\foyuv97.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.717] GetFileType (hFile=0x404) returned 0x1 [0115.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.717] GetFileType (hFile=0x404) returned 0x1 [0115.717] WriteFile (in: hFile=0x404, lpBuffer=0x2508840*, nNumberOfBytesToWrite=0x82c0, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x2508840*, lpNumberOfBytesWritten=0x4fe6f8*=0x82c0, lpOverlapped=0x0) returned 1 [0115.722] CloseHandle (hObject=0x404) returned 1 [0115.724] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc", lpFilePart=0x0) returned 0x35 [0115.724] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc.klavins", lpFilePart=0x0) returned 0x3d [0115.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\foyuv97.doc"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde2e02c0, ftCreationTime.dwHighDateTime=0x1d5f068, ftLastAccessTime.dwLowDateTime=0xeee8f3c0, ftLastAccessTime.dwHighDateTime=0x1d5e88b, ftLastWriteTime.dwLowDateTime=0x87112a82, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x82c0)) returned 1 [0115.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.725] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\foyuv97.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\fOYUV97.doc.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\foyuv97.doc.klavins")) returned 1 [0115.729] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf", lpFilePart=0x0) returned 0x37 [0115.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.729] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\jsfdgzcy5.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.729] GetFileType (hFile=0x404) returned 0x1 [0115.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.729] GetFileType (hFile=0x404) returned 0x1 [0115.729] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x18a23 [0115.730] ReadFile (in: hFile=0x404, lpBuffer=0x344dab8, nNumberOfBytesToRead=0x18a23, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x344dab8*, lpNumberOfBytesRead=0x4fe704*=0x18a23, lpOverlapped=0x0) returned 1 [0115.731] CloseHandle (hObject=0x404) returned 1 [0115.783] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.783] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf", lpFilePart=0x0) returned 0x37 [0115.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.783] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\jsfdgzcy5.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.785] GetFileType (hFile=0x404) returned 0x1 [0115.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.785] GetFileType (hFile=0x404) returned 0x1 [0115.785] WriteFile (in: hFile=0x404, lpBuffer=0x34c8dd8*, nNumberOfBytesToWrite=0x18a30, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x34c8dd8*, lpNumberOfBytesWritten=0x4fe6f8*=0x18a30, lpOverlapped=0x0) returned 1 [0115.787] CloseHandle (hObject=0x404) returned 1 [0115.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf", lpFilePart=0x0) returned 0x37 [0115.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf.klavins", lpFilePart=0x0) returned 0x3f [0115.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\jsfdgzcy5.rtf"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf823d00, ftCreationTime.dwHighDateTime=0x1d5e634, ftLastAccessTime.dwLowDateTime=0x2f0f5620, ftLastAccessTime.dwHighDateTime=0x1d5e999, ftLastWriteTime.dwLowDateTime=0x871ab382, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x18a30)) returned 1 [0115.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.791] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\jsfdgzcy5.rtf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\jSfdGzcY5.rtf.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\jsfdgzcy5.rtf.klavins")) returned 1 [0115.792] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf", lpFilePart=0x0) returned 0x34 [0115.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.792] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\kx fs3.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.792] GetFileType (hFile=0x404) returned 0x1 [0115.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.792] GetFileType (hFile=0x404) returned 0x1 [0115.793] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x1772b [0115.793] ReadFile (in: hFile=0x404, lpBuffer=0x34e1828, nNumberOfBytesToRead=0x1772b, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x34e1828*, lpNumberOfBytesRead=0x4fe704*=0x1772b, lpOverlapped=0x0) returned 1 [0115.794] CloseHandle (hObject=0x404) returned 1 [0115.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf", lpFilePart=0x0) returned 0x34 [0115.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\kx fs3.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.816] GetFileType (hFile=0x404) returned 0x1 [0115.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.816] GetFileType (hFile=0x404) returned 0x1 [0115.816] WriteFile (in: hFile=0x404, lpBuffer=0x3556c50*, nNumberOfBytesToWrite=0x17730, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x3556c50*, lpNumberOfBytesWritten=0x4fe6f8*=0x17730, lpOverlapped=0x0) returned 1 [0115.818] CloseHandle (hObject=0x404) returned 1 [0115.821] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf", lpFilePart=0x0) returned 0x34 [0115.821] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf.klavins", lpFilePart=0x0) returned 0x3c [0115.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\kx fs3.pdf"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacfb08b0, ftCreationTime.dwHighDateTime=0x1d5ee8d, ftLastAccessTime.dwLowDateTime=0xdabaad30, ftLastAccessTime.dwHighDateTime=0x1d5e610, ftLastWriteTime.dwLowDateTime=0x871f78d7, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x17730)) returned 1 [0115.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.821] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\kx fs3.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\KX fS3.pdf.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\kx fs3.pdf.klavins")) returned 1 [0115.821] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt", lpFilePart=0x0) returned 0x3c [0115.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.822] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\orp-h_0bxf_vjr.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.822] GetFileType (hFile=0x404) returned 0x1 [0115.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.822] GetFileType (hFile=0x404) returned 0x1 [0115.822] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x1ab5 [0115.822] ReadFile (in: hFile=0x404, lpBuffer=0x25ab56c, nNumberOfBytesToRead=0x1ab5, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x25ab56c*, lpNumberOfBytesRead=0x4fe704*=0x1ab5, lpOverlapped=0x0) returned 1 [0115.823] CloseHandle (hObject=0x404) returned 1 [0115.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt", lpFilePart=0x0) returned 0x3c [0115.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\orp-h_0bxf_vjr.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.877] GetFileType (hFile=0x404) returned 0x1 [0115.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.877] GetFileType (hFile=0x404) returned 0x1 [0115.877] WriteFile (in: hFile=0x404, lpBuffer=0x240300c*, nNumberOfBytesToWrite=0x1ac0, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x240300c*, lpNumberOfBytesWritten=0x4fe6f8*=0x1ac0, lpOverlapped=0x0) returned 1 [0115.878] CloseHandle (hObject=0x404) returned 1 [0115.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt", lpFilePart=0x0) returned 0x3c [0115.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt.klavins", lpFilePart=0x0) returned 0x44 [0115.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\orp-h_0bxf_vjr.odt"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a29fc0, ftCreationTime.dwHighDateTime=0x1d5e781, ftLastAccessTime.dwLowDateTime=0xb67bce40, ftLastAccessTime.dwHighDateTime=0x1d5e773, ftLastWriteTime.dwLowDateTime=0x87290310, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x1ac0)) returned 1 [0115.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.879] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\orp-h_0bxf_vjr.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\orp-H_0BxF_vJR.odt.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\orp-h_0bxf_vjr.odt.klavins")) returned 1 [0115.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc", lpFilePart=0x0) returned 0x36 [0115.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\vsk6qtk2.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.880] GetFileType (hFile=0x404) returned 0x1 [0115.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.880] GetFileType (hFile=0x404) returned 0x1 [0115.880] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x102cb [0115.880] ReadFile (in: hFile=0x404, lpBuffer=0x2404ffc, nNumberOfBytesToRead=0x102cb, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x2404ffc*, lpNumberOfBytesRead=0x4fe704*=0x102cb, lpOverlapped=0x0) returned 1 [0115.882] CloseHandle (hObject=0x404) returned 1 [0115.900] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0115.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0115.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0115.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0115.900] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc", lpFilePart=0x0) returned 0x36 [0115.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0115.900] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\vsk6qtk2.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.902] GetFileType (hFile=0x404) returned 0x1 [0115.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0115.902] GetFileType (hFile=0x404) returned 0x1 [0115.902] WriteFile (in: hFile=0x404, lpBuffer=0x24827c8*, nNumberOfBytesToWrite=0x102d0, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x24827c8*, lpNumberOfBytesWritten=0x4fe6f8*=0x102d0, lpOverlapped=0x0) returned 1 [0115.904] CloseHandle (hObject=0x404) returned 1 [0115.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc", lpFilePart=0x0) returned 0x36 [0115.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc.klavins", lpFilePart=0x0) returned 0x3e [0115.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0115.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\vsk6qtk2.doc"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x604f78e0, ftCreationTime.dwHighDateTime=0x1d5f101, ftLastAccessTime.dwLowDateTime=0xc39f5390, ftLastAccessTime.dwHighDateTime=0x1d5ee2f, ftLastWriteTime.dwLowDateTime=0x872de39d, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x102d0)) returned 1 [0115.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0115.907] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\vsk6qtk2.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\jIb9\\cKJStRzg4T\\vSK6QtK2.doc.klavins" (normalized: "c:\\users\\fd1hvy\\documents\\jib9\\ckjstrzg4t\\vsk6qtk2.doc.klavins")) returned 1 [0115.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0115.908] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0115.908] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0115.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e8) returned 1 [0115.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0115.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0115.929] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0115.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e8) returned 1 [0115.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0115.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23 [0115.931] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7ead90 [0115.932] FindNextFileW (in: hFindFile=0x7ead90, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.932] FindNextFileW (in: hFindFile=0x7ead90, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0115.932] FindNextFileW (in: hFindFile=0x7ead90, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0115.932] FindNextFileW (in: hFindFile=0x7ead90, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0115.932] FindNextFileW (in: hFindFile=0x7ead90, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0115.933] FindClose (in: hFindFile=0x7ead90 | out: hFindFile=0x7ead90) returned 1 [0115.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0115.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0115.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0115.933] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23 [0115.933] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb010 [0115.933] FindNextFileW (in: hFindFile=0x7eb010, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.933] FindNextFileW (in: hFindFile=0x7eb010, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0115.934] FindNextFileW (in: hFindFile=0x7eb010, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0115.934] FindNextFileW (in: hFindFile=0x7eb010, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0115.934] FindNextFileW (in: hFindFile=0x7eb010, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.934] FindClose (in: hFindFile=0x7eb010 | out: hFindFile=0x7eb010) returned 1 [0115.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0115.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0115.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b0) returned 1 [0115.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x4fe264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c [0115.934] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x4fe4d8 | out: lpFindFileData=0x4fe4d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb050 [0115.935] FindNextFileW (in: hFindFile=0x7eb050, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.935] FindNextFileW (in: hFindFile=0x7eb050, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0115.935] FindNextFileW (in: hFindFile=0x7eb050, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.936] FindClose (in: hFindFile=0x7eb050 | out: hFindFile=0x7eb050) returned 1 [0115.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe76c) returned 1 [0115.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe778) returned 1 [0115.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b0) returned 1 [0115.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x4fe264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c [0115.936] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x4fe4d8 | out: lpFindFileData=0x4fe4d8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb150 [0115.936] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.936] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0115.937] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0115.937] FindClose (in: hFindFile=0x7eb150 | out: hFindFile=0x7eb150) returned 1 [0115.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe76c) returned 1 [0115.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe778) returned 1 [0115.982] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x37 [0115.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0115.982] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0115.982] GetFileType (hFile=0x404) returned 0x1 [0115.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0115.982] GetFileType (hFile=0x404) returned 0x1 [0115.982] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x74e6 [0115.982] ReadFile (in: hFile=0x404, lpBuffer=0x2496284, nNumberOfBytesToRead=0x74e6, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x2496284*, lpNumberOfBytesRead=0x4fe704*=0x74e6, lpOverlapped=0x0) returned 1 [0115.984] CloseHandle (hObject=0x404) returned 1 [0116.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0116.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0116.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x37 [0116.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0116.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0116.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fc9e0) returned 1 [0116.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0116.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0116.039] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0116.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e8) returned 1 [0116.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0116.041] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27 [0116.041] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb010 [0116.042] FindNextFileW (in: hFindFile=0x7eb010, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.042] FindNextFileW (in: hFindFile=0x7eb010, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1 [0116.042] FindNextFileW (in: hFindFile=0x7eb010, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.042] FindClose (in: hFindFile=0x7eb010 | out: hFindFile=0x7eb010) returned 1 [0116.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0116.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0116.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0116.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27 [0116.043] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb190 [0116.043] FindNextFileW (in: hFindFile=0x7eb190, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.043] FindNextFileW (in: hFindFile=0x7eb190, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1 [0116.043] FindNextFileW (in: hFindFile=0x7eb190, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 0 [0116.044] FindClose (in: hFindFile=0x7eb190 | out: hFindFile=0x7eb190) returned 1 [0116.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0116.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0116.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0116.044] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0116.044] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb090 [0116.044] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.045] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0116.045] FindNextFileW (in: hFindFile=0x7eb090, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.045] FindClose (in: hFindFile=0x7eb090 | out: hFindFile=0x7eb090) returned 1 [0116.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0116.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0116.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0116.045] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0116.045] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eae50 [0116.046] FindNextFileW (in: hFindFile=0x7eae50, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.046] FindNextFileW (in: hFindFile=0x7eae50, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0116.046] FindNextFileW (in: hFindFile=0x7eae50, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0116.046] FindClose (in: hFindFile=0x7eae50 | out: hFindFile=0x7eae50) returned 1 [0116.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0116.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0116.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0116.047] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0116.047] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe73b8714, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe73b8714, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eadd0 [0116.047] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe73b8714, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe73b8714, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57bb9ca0, ftCreationTime.dwHighDateTime=0x1d5e97b, ftLastAccessTime.dwLowDateTime=0xb971f830, ftLastAccessTime.dwHighDateTime=0x1d5eab2, ftLastWriteTime.dwLowDateTime=0xb971f830, ftLastWriteTime.dwHighDateTime=0x1d5eab2, nFileSizeHigh=0x0, nFileSizeLow=0x17c3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-zWS.gif", cAlternateFileName="")) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbccacd0, ftCreationTime.dwHighDateTime=0x1d5e95a, ftLastAccessTime.dwLowDateTime=0x8167f550, ftLastAccessTime.dwHighDateTime=0x1d5e53c, ftLastWriteTime.dwLowDateTime=0x8167f550, ftLastWriteTime.dwHighDateTime=0x1d5e53c, nFileSizeHigh=0x0, nFileSizeLow=0xc312, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B0kkOI DGv.bmp", cAlternateFileName="7B0KKO~1.BMP")) returned 1 [0116.047] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b93500, ftCreationTime.dwHighDateTime=0x1d5e398, ftLastAccessTime.dwLowDateTime=0x9defe550, ftLastAccessTime.dwHighDateTime=0x1d5ed7c, ftLastWriteTime.dwLowDateTime=0x9defe550, ftLastWriteTime.dwHighDateTime=0x1d5ed7c, nFileSizeHigh=0x0, nFileSizeLow=0x8297, dwReserved0=0x0, dwReserved1=0x0, cFileName="9ul6s6.bmp", cAlternateFileName="")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a327e70, ftCreationTime.dwHighDateTime=0x1d5e841, ftLastAccessTime.dwLowDateTime=0x31c43810, ftLastAccessTime.dwHighDateTime=0x1d5e0f5, ftLastWriteTime.dwLowDateTime=0x31c43810, ftLastWriteTime.dwHighDateTime=0x1d5e0f5, nFileSizeHigh=0x0, nFileSizeLow=0xe267, dwReserved0=0x0, dwReserved1=0x0, cFileName="c7mA.jpg", cAlternateFileName="")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67727fe0, ftCreationTime.dwHighDateTime=0x1d5e527, ftLastAccessTime.dwLowDateTime=0x1b6d0200, ftLastAccessTime.dwHighDateTime=0x1d5ea36, ftLastWriteTime.dwLowDateTime=0x1b6d0200, ftLastWriteTime.dwHighDateTime=0x1d5ea36, nFileSizeHigh=0x0, nFileSizeLow=0x12d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="EP1eh.png", cAlternateFileName="")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d079bc0, ftCreationTime.dwHighDateTime=0x1d5eb94, ftLastAccessTime.dwLowDateTime=0x722f69d0, ftLastAccessTime.dwHighDateTime=0x1d5e4ae, ftLastWriteTime.dwLowDateTime=0x722f69d0, ftLastWriteTime.dwHighDateTime=0x1d5e4ae, nFileSizeHigh=0x0, nFileSizeLow=0x2843, dwReserved0=0x0, dwReserved1=0x0, cFileName="GW9jvuKeg7Z.gif", cAlternateFileName="GW9JVU~1.GIF")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd556d010, ftCreationTime.dwHighDateTime=0x1d5e7de, ftLastAccessTime.dwLowDateTime=0x576ea050, ftLastAccessTime.dwHighDateTime=0x1d5e0c3, ftLastWriteTime.dwLowDateTime=0x576ea050, ftLastWriteTime.dwHighDateTime=0x1d5e0c3, nFileSizeHigh=0x0, nFileSizeLow=0x18bcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hp19aFBT3HJ.jpg", cAlternateFileName="HP19AF~1.JPG")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x983e88b0, ftCreationTime.dwHighDateTime=0x1d5ec0e, ftLastAccessTime.dwLowDateTime=0xba031630, ftLastAccessTime.dwHighDateTime=0x1d5eff8, ftLastWriteTime.dwLowDateTime=0xba031630, ftLastWriteTime.dwHighDateTime=0x1d5eff8, nFileSizeHigh=0x0, nFileSizeLow=0xd50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jERmwWHTZRt4pIGGnS.bmp", cAlternateFileName="JERMWW~1.BMP")) returned 1 [0116.048] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e5f1c0, ftCreationTime.dwHighDateTime=0x1d5efcc, ftLastAccessTime.dwLowDateTime=0x9821b620, ftLastAccessTime.dwHighDateTime=0x1d5eb43, ftLastWriteTime.dwLowDateTime=0x9821b620, ftLastWriteTime.dwHighDateTime=0x1d5eb43, nFileSizeHigh=0x0, nFileSizeLow=0x11d1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jw_i71pDYLFF.bmp", cAlternateFileName="JW_I71~1.BMP")) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21a43b50, ftCreationTime.dwHighDateTime=0x1d5e2ef, ftLastAccessTime.dwLowDateTime=0x7b77ba10, ftLastAccessTime.dwHighDateTime=0x1d5e4c2, ftLastWriteTime.dwLowDateTime=0x7b77ba10, ftLastWriteTime.dwHighDateTime=0x1d5e4c2, nFileSizeHigh=0x0, nFileSizeLow=0x1e20, dwReserved0=0x0, dwReserved1=0x0, cFileName="K9HC5.bmp", cAlternateFileName="")) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb77a6d70, ftCreationTime.dwHighDateTime=0x1d5e70e, ftLastAccessTime.dwLowDateTime=0x4c1c8df0, ftLastAccessTime.dwHighDateTime=0x1d5e6b0, ftLastWriteTime.dwLowDateTime=0x4c1c8df0, ftLastWriteTime.dwHighDateTime=0x1d5e6b0, nFileSizeHigh=0x0, nFileSizeLow=0x61b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="nr2t HxVtFaw-yLCjXET.gif", cAlternateFileName="NR2THX~1.GIF")) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2dede0, ftCreationTime.dwHighDateTime=0x1d5e562, ftLastAccessTime.dwLowDateTime=0xfbdfe900, ftLastAccessTime.dwHighDateTime=0x1d5e0dc, ftLastWriteTime.dwLowDateTime=0xfbdfe900, ftLastWriteTime.dwHighDateTime=0x1d5e0dc, nFileSizeHigh=0x0, nFileSizeLow=0x81a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NX2OX6naJX1GO-.png", cAlternateFileName="NX2OX6~1.PNG")) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb023cd30, ftCreationTime.dwHighDateTime=0x1d5e87d, ftLastAccessTime.dwLowDateTime=0x66787080, ftLastAccessTime.dwHighDateTime=0x1d5e8ed, ftLastWriteTime.dwLowDateTime=0x66787080, ftLastWriteTime.dwHighDateTime=0x1d5e8ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oZXDrM3YMlGZ8Vdp", cAlternateFileName="OZXDRM~1")) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe250f210, ftCreationTime.dwHighDateTime=0x1d5e4ef, ftLastAccessTime.dwLowDateTime=0x3d9e4dd0, ftLastAccessTime.dwHighDateTime=0x1d5ea6c, ftLastWriteTime.dwLowDateTime=0x3d9e4dd0, ftLastWriteTime.dwHighDateTime=0x1d5ea6c, nFileSizeHigh=0x0, nFileSizeLow=0x16ad3, dwReserved0=0x0, dwReserved1=0x0, cFileName="rZJz_hkXPTZWDPI.gif", cAlternateFileName="RZJZ_H~1.GIF")) returned 1 [0116.049] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0116.050] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4776bc0, ftCreationTime.dwHighDateTime=0x1d5e576, ftLastAccessTime.dwLowDateTime=0xb4d72270, ftLastAccessTime.dwHighDateTime=0x1d5e132, ftLastWriteTime.dwLowDateTime=0xb4d72270, ftLastWriteTime.dwHighDateTime=0x1d5e132, nFileSizeHigh=0x0, nFileSizeLow=0x150e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="u1amgRx.jpg", cAlternateFileName="")) returned 1 [0116.050] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a3e8b50, ftCreationTime.dwHighDateTime=0x1d5e0fa, ftLastAccessTime.dwLowDateTime=0x2855d360, ftLastAccessTime.dwHighDateTime=0x1d5ea0f, ftLastWriteTime.dwLowDateTime=0x2855d360, ftLastWriteTime.dwHighDateTime=0x1d5ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12f2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVGX9cId3Ta8aM.png", cAlternateFileName="VVGX9C~1.PNG")) returned 1 [0116.050] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e2f0ba0, ftCreationTime.dwHighDateTime=0x1d5e10f, ftLastAccessTime.dwLowDateTime=0x7666d220, ftLastAccessTime.dwHighDateTime=0x1d5e4d3, ftLastWriteTime.dwLowDateTime=0x7666d220, ftLastWriteTime.dwHighDateTime=0x1d5e4d3, nFileSizeHigh=0x0, nFileSizeLow=0x15318, dwReserved0=0x0, dwReserved1=0x0, cFileName="wBbfZbe6Y3S3j.bmp", cAlternateFileName="WBBFZB~1.BMP")) returned 1 [0116.050] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2b7a6b0, ftCreationTime.dwHighDateTime=0x1d5ea46, ftLastAccessTime.dwLowDateTime=0xdc727940, ftLastAccessTime.dwHighDateTime=0x1d5e8d7, ftLastWriteTime.dwLowDateTime=0xdc727940, ftLastWriteTime.dwHighDateTime=0x1d5e8d7, nFileSizeHigh=0x0, nFileSizeLow=0x46ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="xB-bueZUgG PILVdo6S.gif", cAlternateFileName="XB-BUE~1.GIF")) returned 1 [0116.050] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaae68d0, ftCreationTime.dwHighDateTime=0x1d5e952, ftLastAccessTime.dwLowDateTime=0x850e3260, ftLastAccessTime.dwHighDateTime=0x1d5e62b, ftLastWriteTime.dwLowDateTime=0x850e3260, ftLastWriteTime.dwHighDateTime=0x1d5e62b, nFileSizeHigh=0x0, nFileSizeLow=0x130e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="YBR1tSh.png", cAlternateFileName="")) returned 1 [0116.050] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe249a5c0, ftCreationTime.dwHighDateTime=0x1d5eae7, ftLastAccessTime.dwLowDateTime=0x2c1852a0, ftLastAccessTime.dwHighDateTime=0x1d5ef3e, ftLastWriteTime.dwLowDateTime=0x2c1852a0, ftLastWriteTime.dwHighDateTime=0x1d5ef3e, nFileSizeHigh=0x0, nFileSizeLow=0x188bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZDpNUoM.png", cAlternateFileName="")) returned 1 [0116.051] FindNextFileW (in: hFindFile=0x7eadd0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.051] FindClose (in: hFindFile=0x7eadd0 | out: hFindFile=0x7eadd0) returned 1 [0116.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0116.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0116.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0116.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0116.051] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe73b8714, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe73b8714, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eae90 [0116.051] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe73b8714, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe73b8714, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57bb9ca0, ftCreationTime.dwHighDateTime=0x1d5e97b, ftLastAccessTime.dwLowDateTime=0xb971f830, ftLastAccessTime.dwHighDateTime=0x1d5eab2, ftLastWriteTime.dwLowDateTime=0xb971f830, ftLastWriteTime.dwHighDateTime=0x1d5eab2, nFileSizeHigh=0x0, nFileSizeLow=0x17c3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-zWS.gif", cAlternateFileName="")) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbccacd0, ftCreationTime.dwHighDateTime=0x1d5e95a, ftLastAccessTime.dwLowDateTime=0x8167f550, ftLastAccessTime.dwHighDateTime=0x1d5e53c, ftLastWriteTime.dwLowDateTime=0x8167f550, ftLastWriteTime.dwHighDateTime=0x1d5e53c, nFileSizeHigh=0x0, nFileSizeLow=0xc312, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B0kkOI DGv.bmp", cAlternateFileName="7B0KKO~1.BMP")) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b93500, ftCreationTime.dwHighDateTime=0x1d5e398, ftLastAccessTime.dwLowDateTime=0x9defe550, ftLastAccessTime.dwHighDateTime=0x1d5ed7c, ftLastWriteTime.dwLowDateTime=0x9defe550, ftLastWriteTime.dwHighDateTime=0x1d5ed7c, nFileSizeHigh=0x0, nFileSizeLow=0x8297, dwReserved0=0x0, dwReserved1=0x0, cFileName="9ul6s6.bmp", cAlternateFileName="")) returned 1 [0116.052] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a327e70, ftCreationTime.dwHighDateTime=0x1d5e841, ftLastAccessTime.dwLowDateTime=0x31c43810, ftLastAccessTime.dwHighDateTime=0x1d5e0f5, ftLastWriteTime.dwLowDateTime=0x31c43810, ftLastWriteTime.dwHighDateTime=0x1d5e0f5, nFileSizeHigh=0x0, nFileSizeLow=0xe267, dwReserved0=0x0, dwReserved1=0x0, cFileName="c7mA.jpg", cAlternateFileName="")) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67727fe0, ftCreationTime.dwHighDateTime=0x1d5e527, ftLastAccessTime.dwLowDateTime=0x1b6d0200, ftLastAccessTime.dwHighDateTime=0x1d5ea36, ftLastWriteTime.dwLowDateTime=0x1b6d0200, ftLastWriteTime.dwHighDateTime=0x1d5ea36, nFileSizeHigh=0x0, nFileSizeLow=0x12d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="EP1eh.png", cAlternateFileName="")) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d079bc0, ftCreationTime.dwHighDateTime=0x1d5eb94, ftLastAccessTime.dwLowDateTime=0x722f69d0, ftLastAccessTime.dwHighDateTime=0x1d5e4ae, ftLastWriteTime.dwLowDateTime=0x722f69d0, ftLastWriteTime.dwHighDateTime=0x1d5e4ae, nFileSizeHigh=0x0, nFileSizeLow=0x2843, dwReserved0=0x0, dwReserved1=0x0, cFileName="GW9jvuKeg7Z.gif", cAlternateFileName="GW9JVU~1.GIF")) returned 1 [0116.053] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd556d010, ftCreationTime.dwHighDateTime=0x1d5e7de, ftLastAccessTime.dwLowDateTime=0x576ea050, ftLastAccessTime.dwHighDateTime=0x1d5e0c3, ftLastWriteTime.dwLowDateTime=0x576ea050, ftLastWriteTime.dwHighDateTime=0x1d5e0c3, nFileSizeHigh=0x0, nFileSizeLow=0x18bcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hp19aFBT3HJ.jpg", cAlternateFileName="HP19AF~1.JPG")) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x983e88b0, ftCreationTime.dwHighDateTime=0x1d5ec0e, ftLastAccessTime.dwLowDateTime=0xba031630, ftLastAccessTime.dwHighDateTime=0x1d5eff8, ftLastWriteTime.dwLowDateTime=0xba031630, ftLastWriteTime.dwHighDateTime=0x1d5eff8, nFileSizeHigh=0x0, nFileSizeLow=0xd50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jERmwWHTZRt4pIGGnS.bmp", cAlternateFileName="JERMWW~1.BMP")) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e5f1c0, ftCreationTime.dwHighDateTime=0x1d5efcc, ftLastAccessTime.dwLowDateTime=0x9821b620, ftLastAccessTime.dwHighDateTime=0x1d5eb43, ftLastWriteTime.dwLowDateTime=0x9821b620, ftLastWriteTime.dwHighDateTime=0x1d5eb43, nFileSizeHigh=0x0, nFileSizeLow=0x11d1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jw_i71pDYLFF.bmp", cAlternateFileName="JW_I71~1.BMP")) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21a43b50, ftCreationTime.dwHighDateTime=0x1d5e2ef, ftLastAccessTime.dwLowDateTime=0x7b77ba10, ftLastAccessTime.dwHighDateTime=0x1d5e4c2, ftLastWriteTime.dwLowDateTime=0x7b77ba10, ftLastWriteTime.dwHighDateTime=0x1d5e4c2, nFileSizeHigh=0x0, nFileSizeLow=0x1e20, dwReserved0=0x0, dwReserved1=0x0, cFileName="K9HC5.bmp", cAlternateFileName="")) returned 1 [0116.054] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb77a6d70, ftCreationTime.dwHighDateTime=0x1d5e70e, ftLastAccessTime.dwLowDateTime=0x4c1c8df0, ftLastAccessTime.dwHighDateTime=0x1d5e6b0, ftLastWriteTime.dwLowDateTime=0x4c1c8df0, ftLastWriteTime.dwHighDateTime=0x1d5e6b0, nFileSizeHigh=0x0, nFileSizeLow=0x61b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="nr2t HxVtFaw-yLCjXET.gif", cAlternateFileName="NR2THX~1.GIF")) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2dede0, ftCreationTime.dwHighDateTime=0x1d5e562, ftLastAccessTime.dwLowDateTime=0xfbdfe900, ftLastAccessTime.dwHighDateTime=0x1d5e0dc, ftLastWriteTime.dwLowDateTime=0xfbdfe900, ftLastWriteTime.dwHighDateTime=0x1d5e0dc, nFileSizeHigh=0x0, nFileSizeLow=0x81a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="NX2OX6naJX1GO-.png", cAlternateFileName="NX2OX6~1.PNG")) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb023cd30, ftCreationTime.dwHighDateTime=0x1d5e87d, ftLastAccessTime.dwLowDateTime=0x66787080, ftLastAccessTime.dwHighDateTime=0x1d5e8ed, ftLastWriteTime.dwLowDateTime=0x66787080, ftLastWriteTime.dwHighDateTime=0x1d5e8ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="oZXDrM3YMlGZ8Vdp", cAlternateFileName="OZXDRM~1")) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe250f210, ftCreationTime.dwHighDateTime=0x1d5e4ef, ftLastAccessTime.dwLowDateTime=0x3d9e4dd0, ftLastAccessTime.dwHighDateTime=0x1d5ea6c, ftLastWriteTime.dwLowDateTime=0x3d9e4dd0, ftLastWriteTime.dwHighDateTime=0x1d5ea6c, nFileSizeHigh=0x0, nFileSizeLow=0x16ad3, dwReserved0=0x0, dwReserved1=0x0, cFileName="rZJz_hkXPTZWDPI.gif", cAlternateFileName="RZJZ_H~1.GIF")) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0116.055] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4776bc0, ftCreationTime.dwHighDateTime=0x1d5e576, ftLastAccessTime.dwLowDateTime=0xb4d72270, ftLastAccessTime.dwHighDateTime=0x1d5e132, ftLastWriteTime.dwLowDateTime=0xb4d72270, ftLastWriteTime.dwHighDateTime=0x1d5e132, nFileSizeHigh=0x0, nFileSizeLow=0x150e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="u1amgRx.jpg", cAlternateFileName="")) returned 1 [0116.056] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a3e8b50, ftCreationTime.dwHighDateTime=0x1d5e0fa, ftLastAccessTime.dwLowDateTime=0x2855d360, ftLastAccessTime.dwHighDateTime=0x1d5ea0f, ftLastWriteTime.dwLowDateTime=0x2855d360, ftLastWriteTime.dwHighDateTime=0x1d5ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x12f2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVGX9cId3Ta8aM.png", cAlternateFileName="VVGX9C~1.PNG")) returned 1 [0116.056] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e2f0ba0, ftCreationTime.dwHighDateTime=0x1d5e10f, ftLastAccessTime.dwLowDateTime=0x7666d220, ftLastAccessTime.dwHighDateTime=0x1d5e4d3, ftLastWriteTime.dwLowDateTime=0x7666d220, ftLastWriteTime.dwHighDateTime=0x1d5e4d3, nFileSizeHigh=0x0, nFileSizeLow=0x15318, dwReserved0=0x0, dwReserved1=0x0, cFileName="wBbfZbe6Y3S3j.bmp", cAlternateFileName="WBBFZB~1.BMP")) returned 1 [0116.056] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2b7a6b0, ftCreationTime.dwHighDateTime=0x1d5ea46, ftLastAccessTime.dwLowDateTime=0xdc727940, ftLastAccessTime.dwHighDateTime=0x1d5e8d7, ftLastWriteTime.dwLowDateTime=0xdc727940, ftLastWriteTime.dwHighDateTime=0x1d5e8d7, nFileSizeHigh=0x0, nFileSizeLow=0x46ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="xB-bueZUgG PILVdo6S.gif", cAlternateFileName="XB-BUE~1.GIF")) returned 1 [0116.056] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaae68d0, ftCreationTime.dwHighDateTime=0x1d5e952, ftLastAccessTime.dwLowDateTime=0x850e3260, ftLastAccessTime.dwHighDateTime=0x1d5e62b, ftLastWriteTime.dwLowDateTime=0x850e3260, ftLastWriteTime.dwHighDateTime=0x1d5e62b, nFileSizeHigh=0x0, nFileSizeLow=0x130e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="YBR1tSh.png", cAlternateFileName="")) returned 1 [0116.056] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe249a5c0, ftCreationTime.dwHighDateTime=0x1d5eae7, ftLastAccessTime.dwLowDateTime=0x2c1852a0, ftLastAccessTime.dwHighDateTime=0x1d5ef3e, ftLastWriteTime.dwLowDateTime=0x2c1852a0, ftLastWriteTime.dwHighDateTime=0x1d5ef3e, nFileSizeHigh=0x0, nFileSizeLow=0x188bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZDpNUoM.png", cAlternateFileName="")) returned 1 [0116.057] FindNextFileW (in: hFindFile=0x7eae90, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe249a5c0, ftCreationTime.dwHighDateTime=0x1d5eae7, ftLastAccessTime.dwLowDateTime=0x2c1852a0, ftLastAccessTime.dwHighDateTime=0x1d5ef3e, ftLastWriteTime.dwLowDateTime=0x2c1852a0, ftLastWriteTime.dwHighDateTime=0x1d5ef3e, nFileSizeHigh=0x0, nFileSizeLow=0x188bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZDpNUoM.png", cAlternateFileName="")) returned 0 [0116.057] FindClose (in: hFindFile=0x7eae90 | out: hFindFile=0x7eae90) returned 1 [0116.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0116.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0116.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp", lpFilePart=0x0) returned 0x28 [0116.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.057] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\7b0kkoi dgv.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.058] GetFileType (hFile=0x404) returned 0x1 [0116.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.058] GetFileType (hFile=0x404) returned 0x1 [0116.058] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xc312 [0116.058] ReadFile (in: hFile=0x404, lpBuffer=0x2515b28, nNumberOfBytesToRead=0xc312, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2515b28*, lpNumberOfBytesRead=0x4fe7ec*=0xc312, lpOverlapped=0x0) returned 1 [0116.059] CloseHandle (hObject=0x404) returned 1 [0116.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0116.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0116.158] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp", lpFilePart=0x0) returned 0x28 [0116.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0116.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\7b0kkoi dgv.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.160] GetFileType (hFile=0x404) returned 0x1 [0116.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0116.160] GetFileType (hFile=0x404) returned 0x1 [0116.160] WriteFile (in: hFile=0x404, lpBuffer=0x2587288*, nNumberOfBytesToWrite=0xc320, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2587288*, lpNumberOfBytesWritten=0x4fe7e0*=0xc320, lpOverlapped=0x0) returned 1 [0116.162] CloseHandle (hObject=0x404) returned 1 [0116.164] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp", lpFilePart=0x0) returned 0x28 [0116.165] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp.klavins", lpFilePart=0x0) returned 0x30 [0116.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0116.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\7b0kkoi dgv.bmp"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbccacd0, ftCreationTime.dwHighDateTime=0x1d5e95a, ftLastAccessTime.dwLowDateTime=0x8167f550, ftLastAccessTime.dwHighDateTime=0x1d5e53c, ftLastWriteTime.dwLowDateTime=0x8753ec9f, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xc320)) returned 1 [0116.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0116.165] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\7b0kkoi dgv.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\7B0kkOI DGv.bmp.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\7b0kkoi dgv.bmp.klavins")) returned 1 [0116.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp", lpFilePart=0x0) returned 0x23 [0116.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.166] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\9ul6s6.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.166] GetFileType (hFile=0x404) returned 0x1 [0116.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.166] GetFileType (hFile=0x404) returned 0x1 [0116.166] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x8297 [0116.166] ReadFile (in: hFile=0x404, lpBuffer=0x25939ec, nNumberOfBytesToRead=0x8297, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x25939ec*, lpNumberOfBytesRead=0x4fe7ec*=0x8297, lpOverlapped=0x0) returned 1 [0116.168] CloseHandle (hObject=0x404) returned 1 [0116.242] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0116.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0116.243] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp", lpFilePart=0x0) returned 0x23 [0116.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0116.243] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\9ul6s6.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.245] GetFileType (hFile=0x404) returned 0x1 [0116.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0116.245] GetFileType (hFile=0x404) returned 0x1 [0116.245] WriteFile (in: hFile=0x404, lpBuffer=0x2415f18*, nNumberOfBytesToWrite=0x82a0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2415f18*, lpNumberOfBytesWritten=0x4fe7e0*=0x82a0, lpOverlapped=0x0) returned 1 [0116.246] CloseHandle (hObject=0x404) returned 1 [0116.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp", lpFilePart=0x0) returned 0x23 [0116.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp.klavins", lpFilePart=0x0) returned 0x2b [0116.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0116.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\9ul6s6.bmp"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b93500, ftCreationTime.dwHighDateTime=0x1d5e398, ftLastAccessTime.dwLowDateTime=0x9defe550, ftLastAccessTime.dwHighDateTime=0x1d5ed7c, ftLastWriteTime.dwLowDateTime=0x875fd933, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x82a0)) returned 1 [0116.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0116.251] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\9ul6s6.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\9ul6s6.bmp.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\9ul6s6.bmp.klavins")) returned 1 [0116.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg", lpFilePart=0x0) returned 0x21 [0116.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\c7ma.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.252] GetFileType (hFile=0x404) returned 0x1 [0116.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.252] GetFileType (hFile=0x404) returned 0x1 [0116.252] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xe267 [0116.252] ReadFile (in: hFile=0x404, lpBuffer=0x241e5bc, nNumberOfBytesToRead=0xe267, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x241e5bc*, lpNumberOfBytesRead=0x4fe7ec*=0xe267, lpOverlapped=0x0) returned 1 [0116.254] CloseHandle (hObject=0x404) returned 1 [0116.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0116.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0116.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg", lpFilePart=0x0) returned 0x21 [0116.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0116.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\c7ma.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.283] GetFileType (hFile=0x404) returned 0x1 [0116.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0116.283] GetFileType (hFile=0x404) returned 0x1 [0116.283] WriteFile (in: hFile=0x404, lpBuffer=0x2495c68*, nNumberOfBytesToWrite=0xe270, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2495c68*, lpNumberOfBytesWritten=0x4fe7e0*=0xe270, lpOverlapped=0x0) returned 1 [0116.285] CloseHandle (hObject=0x404) returned 1 [0116.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg", lpFilePart=0x0) returned 0x21 [0116.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg.klavins", lpFilePart=0x0) returned 0x29 [0116.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0116.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\c7ma.jpg"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a327e70, ftCreationTime.dwHighDateTime=0x1d5e841, ftLastAccessTime.dwLowDateTime=0x31c43810, ftLastAccessTime.dwHighDateTime=0x1d5e0f5, ftLastWriteTime.dwLowDateTime=0x8766ff10, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xe270)) returned 1 [0116.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0116.289] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\c7ma.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\c7mA.jpg.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\c7ma.jpg.klavins")) returned 1 [0116.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png", lpFilePart=0x0) returned 0x22 [0116.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.290] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ep1eh.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.290] GetFileType (hFile=0x404) returned 0x1 [0116.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.290] GetFileType (hFile=0x404) returned 0x1 [0116.290] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x12d44 [0116.290] ReadFile (in: hFile=0x404, lpBuffer=0x24a42e4, nNumberOfBytesToRead=0x12d44, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x24a42e4*, lpNumberOfBytesRead=0x4fe7ec*=0x12d44, lpOverlapped=0x0) returned 1 [0116.292] CloseHandle (hObject=0x404) returned 1 [0116.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0116.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0116.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png", lpFilePart=0x0) returned 0x22 [0116.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0116.322] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ep1eh.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.324] GetFileType (hFile=0x404) returned 0x1 [0116.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0116.324] GetFileType (hFile=0x404) returned 0x1 [0116.324] WriteFile (in: hFile=0x404, lpBuffer=0x25298d0*, nNumberOfBytesToWrite=0x12d50, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x25298d0*, lpNumberOfBytesWritten=0x4fe7e0*=0x12d50, lpOverlapped=0x0) returned 1 [0116.326] CloseHandle (hObject=0x404) returned 1 [0116.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png", lpFilePart=0x0) returned 0x22 [0116.330] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png.klavins", lpFilePart=0x0) returned 0x2a [0116.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0116.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ep1eh.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67727fe0, ftCreationTime.dwHighDateTime=0x1d5e527, ftLastAccessTime.dwLowDateTime=0x1b6d0200, ftLastAccessTime.dwHighDateTime=0x1d5ea36, ftLastWriteTime.dwLowDateTime=0x876e26cd, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x12d50)) returned 1 [0116.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0116.330] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ep1eh.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\EP1eh.png.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\ep1eh.png.klavins")) returned 1 [0116.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg", lpFilePart=0x0) returned 0x28 [0116.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.331] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\hp19afbt3hj.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.331] GetFileType (hFile=0x404) returned 0x1 [0116.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.331] GetFileType (hFile=0x404) returned 0x1 [0116.331] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x18bcd [0116.331] ReadFile (in: hFile=0x404, lpBuffer=0x35e8f00, nNumberOfBytesToRead=0x18bcd, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x35e8f00*, lpNumberOfBytesRead=0x4fe7ec*=0x18bcd, lpOverlapped=0x0) returned 1 [0116.333] CloseHandle (hObject=0x404) returned 1 [0116.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0116.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0116.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg", lpFilePart=0x0) returned 0x28 [0116.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0116.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\hp19afbt3hj.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.423] GetFileType (hFile=0x404) returned 0x1 [0116.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0116.423] GetFileType (hFile=0x404) returned 0x1 [0116.423] WriteFile (in: hFile=0x404, lpBuffer=0x36e11f8*, nNumberOfBytesToWrite=0x18bd0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x36e11f8*, lpNumberOfBytesWritten=0x4fe7e0*=0x18bd0, lpOverlapped=0x0) returned 1 [0116.426] CloseHandle (hObject=0x404) returned 1 [0116.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg", lpFilePart=0x0) returned 0x28 [0116.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg.klavins", lpFilePart=0x0) returned 0x30 [0116.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0116.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\hp19afbt3hj.jpg"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd556d010, ftCreationTime.dwHighDateTime=0x1d5e7de, ftLastAccessTime.dwLowDateTime=0x576ea050, ftLastAccessTime.dwHighDateTime=0x1d5e0c3, ftLastWriteTime.dwLowDateTime=0x877c72dd, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x18bd0)) returned 1 [0116.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0116.433] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\hp19afbt3hj.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\Hp19aFBT3HJ.jpg.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\hp19afbt3hj.jpg.klavins")) returned 1 [0116.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp", lpFilePart=0x0) returned 0x2f [0116.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jermwwhtzrt4piggns.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.434] GetFileType (hFile=0x404) returned 0x1 [0116.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.434] GetFileType (hFile=0x404) returned 0x1 [0116.434] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xd50e [0116.434] ReadFile (in: hFile=0x404, lpBuffer=0x2589cb8, nNumberOfBytesToRead=0xd50e, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2589cb8*, lpNumberOfBytesRead=0x4fe7ec*=0xd50e, lpOverlapped=0x0) returned 1 [0116.436] CloseHandle (hObject=0x404) returned 1 [0116.467] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0116.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0116.467] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp", lpFilePart=0x0) returned 0x2f [0116.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0116.467] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jermwwhtzrt4piggns.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.471] GetFileType (hFile=0x404) returned 0x1 [0116.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0116.471] GetFileType (hFile=0x404) returned 0x1 [0116.471] WriteFile (in: hFile=0x404, lpBuffer=0x241ca70*, nNumberOfBytesToWrite=0xd510, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x241ca70*, lpNumberOfBytesWritten=0x4fe7e0*=0xd510, lpOverlapped=0x0) returned 1 [0116.473] CloseHandle (hObject=0x404) returned 1 [0116.479] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp", lpFilePart=0x0) returned 0x2f [0116.479] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp.klavins", lpFilePart=0x0) returned 0x37 [0116.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0116.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jermwwhtzrt4piggns.bmp"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x983e88b0, ftCreationTime.dwHighDateTime=0x1d5ec0e, ftLastAccessTime.dwLowDateTime=0xba031630, ftLastAccessTime.dwHighDateTime=0x1d5eff8, ftLastWriteTime.dwLowDateTime=0x87839c88, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xd510)) returned 1 [0116.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0116.479] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jermwwhtzrt4piggns.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\jERmwWHTZRt4pIGGnS.bmp.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\jermwwhtzrt4piggns.bmp.klavins")) returned 1 [0116.480] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp", lpFilePart=0x0) returned 0x29 [0116.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.480] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jw_i71pdylff.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.480] GetFileType (hFile=0x404) returned 0x1 [0116.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.480] GetFileType (hFile=0x404) returned 0x1 [0116.480] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x11d1e [0116.480] ReadFile (in: hFile=0x404, lpBuffer=0x242a41c, nNumberOfBytesToRead=0x11d1e, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x242a41c*, lpNumberOfBytesRead=0x4fe7ec*=0x11d1e, lpOverlapped=0x0) returned 1 [0116.482] CloseHandle (hObject=0x404) returned 1 [0116.635] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0116.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0116.635] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp", lpFilePart=0x0) returned 0x29 [0116.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0116.636] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jw_i71pdylff.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.637] GetFileType (hFile=0x404) returned 0x1 [0116.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0116.637] GetFileType (hFile=0x404) returned 0x1 [0116.637] WriteFile (in: hFile=0x404, lpBuffer=0x23d740c*, nNumberOfBytesToWrite=0x11d20, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x23d740c*, lpNumberOfBytesWritten=0x4fe7e0*=0x11d20, lpOverlapped=0x0) returned 1 [0116.639] CloseHandle (hObject=0x404) returned 1 [0116.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp", lpFilePart=0x0) returned 0x29 [0116.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp.klavins", lpFilePart=0x0) returned 0x31 [0116.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0116.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jw_i71pdylff.bmp"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e5f1c0, ftCreationTime.dwHighDateTime=0x1d5efcc, ftLastAccessTime.dwLowDateTime=0x9821b620, ftLastAccessTime.dwHighDateTime=0x1d5eb43, ftLastWriteTime.dwLowDateTime=0x879dd535, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x11d20)) returned 1 [0116.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0116.644] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\jw_i71pdylff.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\Jw_i71pDYLFF.bmp.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\jw_i71pdylff.bmp.klavins")) returned 1 [0116.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp", lpFilePart=0x0) returned 0x22 [0116.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\k9hc5.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.645] GetFileType (hFile=0x404) returned 0x1 [0116.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.645] GetFileType (hFile=0x404) returned 0x1 [0116.645] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x1e20 [0116.645] ReadFile (in: hFile=0x404, lpBuffer=0x23e9570, nNumberOfBytesToRead=0x1e20, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x23e9570*, lpNumberOfBytesRead=0x4fe7ec*=0x1e20, lpOverlapped=0x0) returned 1 [0116.646] CloseHandle (hObject=0x404) returned 1 [0116.697] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0116.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0116.697] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp", lpFilePart=0x0) returned 0x22 [0116.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0116.698] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\k9hc5.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.699] GetFileType (hFile=0x404) returned 0x1 [0116.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0116.699] GetFileType (hFile=0x404) returned 0x1 [0116.699] WriteFile (in: hFile=0x404, lpBuffer=0x243fba4*, nNumberOfBytesToWrite=0x1e30, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x243fba4*, lpNumberOfBytesWritten=0x4fe7e0*=0x1e30, lpOverlapped=0x0) returned 1 [0116.700] CloseHandle (hObject=0x404) returned 1 [0116.701] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp", lpFilePart=0x0) returned 0x22 [0116.701] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp.klavins", lpFilePart=0x0) returned 0x2a [0116.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0116.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\k9hc5.bmp"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21a43b50, ftCreationTime.dwHighDateTime=0x1d5e2ef, ftLastAccessTime.dwLowDateTime=0x7b77ba10, ftLastAccessTime.dwHighDateTime=0x1d5e4c2, ftLastWriteTime.dwLowDateTime=0x87a4fcc3, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x1e30)) returned 1 [0116.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0116.702] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\k9hc5.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\K9HC5.bmp.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\k9hc5.bmp.klavins")) returned 1 [0116.702] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png", lpFilePart=0x0) returned 0x2b [0116.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png" (normalized: "c:\\users\\fd1hvy\\pictures\\nx2ox6najx1go-.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.703] GetFileType (hFile=0x404) returned 0x1 [0116.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.703] GetFileType (hFile=0x404) returned 0x1 [0116.703] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x81a6 [0116.703] ReadFile (in: hFile=0x404, lpBuffer=0x2441e14, nNumberOfBytesToRead=0x81a6, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x2441e14*, lpNumberOfBytesRead=0x4fe7ec*=0x81a6, lpOverlapped=0x0) returned 1 [0116.704] CloseHandle (hObject=0x404) returned 1 [0116.721] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0116.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0116.721] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png", lpFilePart=0x0) returned 0x2b [0116.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0116.721] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png" (normalized: "c:\\users\\fd1hvy\\pictures\\nx2ox6najx1go-.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.722] GetFileType (hFile=0x404) returned 0x1 [0116.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0116.722] GetFileType (hFile=0x404) returned 0x1 [0116.722] WriteFile (in: hFile=0x404, lpBuffer=0x24b7470*, nNumberOfBytesToWrite=0x81b0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x24b7470*, lpNumberOfBytesWritten=0x4fe7e0*=0x81b0, lpOverlapped=0x0) returned 1 [0116.724] CloseHandle (hObject=0x404) returned 1 [0116.725] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png", lpFilePart=0x0) returned 0x2b [0116.725] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png.klavins", lpFilePart=0x0) returned 0x33 [0116.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0116.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png" (normalized: "c:\\users\\fd1hvy\\pictures\\nx2ox6najx1go-.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc2dede0, ftCreationTime.dwHighDateTime=0x1d5e562, ftLastAccessTime.dwLowDateTime=0xfbdfe900, ftLastAccessTime.dwHighDateTime=0x1d5e0dc, ftLastWriteTime.dwLowDateTime=0x87a9c5d9, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x81b0)) returned 1 [0116.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0116.726] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png" (normalized: "c:\\users\\fd1hvy\\pictures\\nx2ox6najx1go-.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\NX2OX6naJX1GO-.png.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\nx2ox6najx1go-.png.klavins")) returned 1 [0116.726] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg", lpFilePart=0x0) returned 0x24 [0116.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.726] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\u1amgrx.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.726] GetFileType (hFile=0x404) returned 0x1 [0116.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.727] GetFileType (hFile=0x404) returned 0x1 [0116.727] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x150e2 [0116.727] ReadFile (in: hFile=0x404, lpBuffer=0x33c5488, nNumberOfBytesToRead=0x150e2, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x33c5488*, lpNumberOfBytesRead=0x4fe7ec*=0x150e2, lpOverlapped=0x0) returned 1 [0116.730] CloseHandle (hObject=0x404) returned 1 [0116.755] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0116.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0116.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg", lpFilePart=0x0) returned 0x24 [0116.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0116.756] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\u1amgrx.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.757] GetFileType (hFile=0x404) returned 0x1 [0116.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0116.757] GetFileType (hFile=0x404) returned 0x1 [0116.757] WriteFile (in: hFile=0x404, lpBuffer=0x342e968*, nNumberOfBytesToWrite=0x150f0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x342e968*, lpNumberOfBytesWritten=0x4fe7e0*=0x150f0, lpOverlapped=0x0) returned 1 [0116.759] CloseHandle (hObject=0x404) returned 1 [0116.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg", lpFilePart=0x0) returned 0x24 [0116.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg.klavins", lpFilePart=0x0) returned 0x2c [0116.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0116.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\u1amgrx.jpg"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4776bc0, ftCreationTime.dwHighDateTime=0x1d5e576, ftLastAccessTime.dwLowDateTime=0xb4d72270, ftLastAccessTime.dwHighDateTime=0x1d5e132, ftLastWriteTime.dwLowDateTime=0x87ae85d3, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x150f0)) returned 1 [0116.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0116.762] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\u1amgrx.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\u1amgRx.jpg.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\u1amgrx.jpg.klavins")) returned 1 [0116.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png", lpFilePart=0x0) returned 0x2b [0116.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.763] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png" (normalized: "c:\\users\\fd1hvy\\pictures\\vvgx9cid3ta8am.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.763] GetFileType (hFile=0x404) returned 0x1 [0116.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.763] GetFileType (hFile=0x404) returned 0x1 [0116.763] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x12f2d [0116.763] ReadFile (in: hFile=0x404, lpBuffer=0x250ccd0, nNumberOfBytesToRead=0x12f2d, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x250ccd0*, lpNumberOfBytesRead=0x4fe7ec*=0x12f2d, lpOverlapped=0x0) returned 1 [0116.764] CloseHandle (hObject=0x404) returned 1 [0116.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0116.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0116.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png", lpFilePart=0x0) returned 0x2b [0116.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0116.809] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png" (normalized: "c:\\users\\fd1hvy\\pictures\\vvgx9cid3ta8am.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.811] GetFileType (hFile=0x404) returned 0x1 [0116.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0116.811] GetFileType (hFile=0x404) returned 0x1 [0116.811] WriteFile (in: hFile=0x404, lpBuffer=0x2592860*, nNumberOfBytesToWrite=0x12f30, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2592860*, lpNumberOfBytesWritten=0x4fe7e0*=0x12f30, lpOverlapped=0x0) returned 1 [0116.813] CloseHandle (hObject=0x404) returned 1 [0116.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png", lpFilePart=0x0) returned 0x2b [0116.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png.klavins", lpFilePart=0x0) returned 0x33 [0116.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0116.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png" (normalized: "c:\\users\\fd1hvy\\pictures\\vvgx9cid3ta8am.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a3e8b50, ftCreationTime.dwHighDateTime=0x1d5e0fa, ftLastAccessTime.dwLowDateTime=0x2855d360, ftLastAccessTime.dwHighDateTime=0x1d5ea0f, ftLastWriteTime.dwLowDateTime=0x87b80f33, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x12f30)) returned 1 [0116.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0116.816] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png" (normalized: "c:\\users\\fd1hvy\\pictures\\vvgx9cid3ta8am.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\VVGX9cId3Ta8aM.png.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\vvgx9cid3ta8am.png.klavins")) returned 1 [0116.817] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp", lpFilePart=0x0) returned 0x2a [0116.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\wbbfzbe6y3s3j.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.817] GetFileType (hFile=0x404) returned 0x1 [0116.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.817] GetFileType (hFile=0x404) returned 0x1 [0116.817] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x15318 [0116.818] ReadFile (in: hFile=0x404, lpBuffer=0x34698d8, nNumberOfBytesToRead=0x15318, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x34698d8*, lpNumberOfBytesRead=0x4fe7ec*=0x15318, lpOverlapped=0x0) returned 1 [0116.820] CloseHandle (hObject=0x404) returned 1 [0116.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0116.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0116.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0116.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0116.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp", lpFilePart=0x0) returned 0x2a [0116.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0116.863] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\wbbfzbe6y3s3j.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.865] GetFileType (hFile=0x404) returned 0x1 [0116.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0116.865] GetFileType (hFile=0x404) returned 0x1 [0116.865] WriteFile (in: hFile=0x404, lpBuffer=0x34d38b0*, nNumberOfBytesToWrite=0x15320, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x34d38b0*, lpNumberOfBytesWritten=0x4fe7e0*=0x15320, lpOverlapped=0x0) returned 1 [0116.867] CloseHandle (hObject=0x404) returned 1 [0116.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp", lpFilePart=0x0) returned 0x2a [0116.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp.klavins", lpFilePart=0x0) returned 0x32 [0116.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0116.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\wbbfzbe6y3s3j.bmp"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e2f0ba0, ftCreationTime.dwHighDateTime=0x1d5e10f, ftLastAccessTime.dwLowDateTime=0x7666d220, ftLastAccessTime.dwHighDateTime=0x1d5e4d3, ftLastWriteTime.dwLowDateTime=0x87bf3672, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x15320)) returned 1 [0116.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0116.871] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\wbbfzbe6y3s3j.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\wBbfZbe6Y3S3j.bmp.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\wbbfzbe6y3s3j.bmp.klavins")) returned 1 [0116.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png", lpFilePart=0x0) returned 0x24 [0116.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0116.903] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ybr1tsh.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0116.903] GetFileType (hFile=0x404) returned 0x1 [0116.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0116.904] GetFileType (hFile=0x404) returned 0x1 [0116.904] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x130e3 [0116.904] ReadFile (in: hFile=0x404, lpBuffer=0x25f2e70, nNumberOfBytesToRead=0x130e3, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x25f2e70*, lpNumberOfBytesRead=0x4fe7ec*=0x130e3, lpOverlapped=0x0) returned 1 [0116.906] CloseHandle (hObject=0x404) returned 1 [0117.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0117.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0117.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png", lpFilePart=0x0) returned 0x24 [0117.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0117.002] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ybr1tsh.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.003] GetFileType (hFile=0x404) returned 0x1 [0117.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0117.003] GetFileType (hFile=0x404) returned 0x1 [0117.003] WriteFile (in: hFile=0x404, lpBuffer=0x242c55c*, nNumberOfBytesToWrite=0x130f0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x242c55c*, lpNumberOfBytesWritten=0x4fe7e0*=0x130f0, lpOverlapped=0x0) returned 1 [0117.005] CloseHandle (hObject=0x404) returned 1 [0117.008] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png", lpFilePart=0x0) returned 0x24 [0117.008] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png.klavins", lpFilePart=0x0) returned 0x2c [0117.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0117.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ybr1tsh.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaae68d0, ftCreationTime.dwHighDateTime=0x1d5e952, ftLastAccessTime.dwLowDateTime=0x850e3260, ftLastAccessTime.dwHighDateTime=0x1d5e62b, ftLastWriteTime.dwLowDateTime=0x87d4ab76, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x130f0)) returned 1 [0117.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0117.008] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ybr1tsh.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\YBR1tSh.png.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\ybr1tsh.png.klavins")) returned 1 [0117.009] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png", lpFilePart=0x0) returned 0x24 [0117.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0117.009] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png" (normalized: "c:\\users\\fd1hvy\\pictures\\zdpnuom.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.009] GetFileType (hFile=0x404) returned 0x1 [0117.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0117.009] GetFileType (hFile=0x404) returned 0x1 [0117.009] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x188bb [0117.010] ReadFile (in: hFile=0x404, lpBuffer=0x350edd0, nNumberOfBytesToRead=0x188bb, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x350edd0*, lpNumberOfBytesRead=0x4fe7ec*=0x188bb, lpOverlapped=0x0) returned 1 [0117.013] CloseHandle (hObject=0x404) returned 1 [0117.090] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0117.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0117.090] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png", lpFilePart=0x0) returned 0x24 [0117.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0117.090] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png" (normalized: "c:\\users\\fd1hvy\\pictures\\zdpnuom.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.092] GetFileType (hFile=0x404) returned 0x1 [0117.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0117.092] GetFileType (hFile=0x404) returned 0x1 [0117.092] WriteFile (in: hFile=0x404, lpBuffer=0x35899c8*, nNumberOfBytesToWrite=0x188c0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x35899c8*, lpNumberOfBytesWritten=0x4fe7e0*=0x188c0, lpOverlapped=0x0) returned 1 [0117.095] CloseHandle (hObject=0x404) returned 1 [0117.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png", lpFilePart=0x0) returned 0x24 [0117.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png.klavins", lpFilePart=0x0) returned 0x2c [0117.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0117.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png" (normalized: "c:\\users\\fd1hvy\\pictures\\zdpnuom.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe249a5c0, ftCreationTime.dwHighDateTime=0x1d5eae7, ftLastAccessTime.dwLowDateTime=0x2c1852a0, ftLastAccessTime.dwHighDateTime=0x1d5ef3e, ftLastWriteTime.dwLowDateTime=0x87e2f989, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x188c0)) returned 1 [0117.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0117.098] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png" (normalized: "c:\\users\\fd1hvy\\pictures\\zdpnuom.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\ZDpNUoM.png.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\zdpnuom.png.klavins")) returned 1 [0117.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0117.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x24 [0117.099] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb190 [0117.101] FindNextFileW (in: hFindFile=0x7eb190, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.101] FindNextFileW (in: hFindFile=0x7eb190, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.101] FindNextFileW (in: hFindFile=0x7eb190, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.101] FindClose (in: hFindFile=0x7eb190 | out: hFindFile=0x7eb190) returned 1 [0117.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0117.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0117.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0117.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x24 [0117.102] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb150 [0117.102] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.102] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.102] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0117.102] FindClose (in: hFindFile=0x7eb150 | out: hFindFile=0x7eb150) returned 1 [0117.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0117.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0117.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0117.103] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp", lpFilePart=0x0) returned 0x29 [0117.103] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb023cd30, ftCreationTime.dwHighDateTime=0x1d5e87d, ftLastAccessTime.dwLowDateTime=0x66787080, ftLastAccessTime.dwHighDateTime=0x1d5e8ed, ftLastWriteTime.dwLowDateTime=0x66787080, ftLastWriteTime.dwHighDateTime=0x1d5e8ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb150 [0117.103] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb023cd30, ftCreationTime.dwHighDateTime=0x1d5e87d, ftLastAccessTime.dwLowDateTime=0x66787080, ftLastAccessTime.dwHighDateTime=0x1d5e8ed, ftLastWriteTime.dwLowDateTime=0x66787080, ftLastWriteTime.dwHighDateTime=0x1d5e8ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.103] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17bcf9b0, ftCreationTime.dwHighDateTime=0x1d5ef15, ftLastAccessTime.dwLowDateTime=0xa1115520, ftLastAccessTime.dwHighDateTime=0x1d5e13d, ftLastWriteTime.dwLowDateTime=0xa1115520, ftLastWriteTime.dwHighDateTime=0x1d5e13d, nFileSizeHigh=0x0, nFileSizeLow=0x47e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="1oQx2PlaY_9.png", cAlternateFileName="1OQX2P~1.PNG")) returned 1 [0117.103] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6bd4760, ftCreationTime.dwHighDateTime=0x1d5eb1f, ftLastAccessTime.dwLowDateTime=0x77ab4930, ftLastAccessTime.dwHighDateTime=0x1d5eb9b, ftLastWriteTime.dwLowDateTime=0x77ab4930, ftLastWriteTime.dwHighDateTime=0x1d5eb9b, nFileSizeHigh=0x0, nFileSizeLow=0xde20, dwReserved0=0x0, dwReserved1=0x0, cFileName="6PJmK 8_RW.gif", cAlternateFileName="6PJMK8~1.GIF")) returned 1 [0117.104] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a516c80, ftCreationTime.dwHighDateTime=0x1d5e3df, ftLastAccessTime.dwLowDateTime=0x22a20c60, ftLastAccessTime.dwHighDateTime=0x1d5e0b7, ftLastWriteTime.dwLowDateTime=0x22a20c60, ftLastWriteTime.dwHighDateTime=0x1d5e0b7, nFileSizeHigh=0x0, nFileSizeLow=0x11822, dwReserved0=0x0, dwReserved1=0x0, cFileName="9nPz82rQ.png", cAlternateFileName="")) returned 1 [0117.104] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4720f50, ftCreationTime.dwHighDateTime=0x1d5eb55, ftLastAccessTime.dwLowDateTime=0x99c0cbd0, ftLastAccessTime.dwHighDateTime=0x1d5e9b1, ftLastWriteTime.dwLowDateTime=0x99c0cbd0, ftLastWriteTime.dwHighDateTime=0x1d5e9b1, nFileSizeHigh=0x0, nFileSizeLow=0x8d4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BgEHQ.png", cAlternateFileName="")) returned 1 [0117.104] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2682b8e0, ftCreationTime.dwHighDateTime=0x1d5e560, ftLastAccessTime.dwLowDateTime=0x1de6e310, ftLastAccessTime.dwHighDateTime=0x1d5e21c, ftLastWriteTime.dwLowDateTime=0x1de6e310, ftLastWriteTime.dwHighDateTime=0x1d5e21c, nFileSizeHigh=0x0, nFileSizeLow=0x43d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bSC kTfZMTui.gif", cAlternateFileName="BSCKTF~1.GIF")) returned 1 [0117.104] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17796120, ftCreationTime.dwHighDateTime=0x1d5eb1c, ftLastAccessTime.dwLowDateTime=0xe8fbe5a0, ftLastAccessTime.dwHighDateTime=0x1d5e357, ftLastWriteTime.dwLowDateTime=0xe8fbe5a0, ftLastWriteTime.dwHighDateTime=0x1d5e357, nFileSizeHigh=0x0, nFileSizeLow=0x17d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="p RB5lEb.gif", cAlternateFileName="PRB5LE~1.GIF")) returned 1 [0117.104] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9559a00, ftCreationTime.dwHighDateTime=0x1d5e5aa, ftLastAccessTime.dwLowDateTime=0xd28177c0, ftLastAccessTime.dwHighDateTime=0x1d5e714, ftLastWriteTime.dwLowDateTime=0xd28177c0, ftLastWriteTime.dwHighDateTime=0x1d5e714, nFileSizeHigh=0x0, nFileSizeLow=0x9428, dwReserved0=0x0, dwReserved1=0x0, cFileName="pLH1ise1tB G4DS1Ax.gif", cAlternateFileName="PLH1IS~1.GIF")) returned 1 [0117.104] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9b1a800, ftCreationTime.dwHighDateTime=0x1d5e5f1, ftLastAccessTime.dwLowDateTime=0xf1fcefe0, ftLastAccessTime.dwHighDateTime=0x1d5eff1, ftLastWriteTime.dwLowDateTime=0xf1fcefe0, ftLastWriteTime.dwHighDateTime=0x1d5eff1, nFileSizeHigh=0x0, nFileSizeLow=0xdab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PR90ydljK32vzDgk6.gif", cAlternateFileName="PR90YD~1.GIF")) returned 1 [0117.105] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5d52360, ftCreationTime.dwHighDateTime=0x1d5eb43, ftLastAccessTime.dwLowDateTime=0x51de6960, ftLastAccessTime.dwHighDateTime=0x1d5ec10, ftLastWriteTime.dwLowDateTime=0x51de6960, ftLastWriteTime.dwHighDateTime=0x1d5ec10, nFileSizeHigh=0x0, nFileSizeLow=0xdf43, dwReserved0=0x0, dwReserved1=0x0, cFileName="QQoT8tuRcptR.png", cAlternateFileName="QQOT8T~1.PNG")) returned 1 [0117.105] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d1b2ce0, ftCreationTime.dwHighDateTime=0x1d5e22f, ftLastAccessTime.dwLowDateTime=0x24ad7940, ftLastAccessTime.dwHighDateTime=0x1d5eb2a, ftLastWriteTime.dwLowDateTime=0x24ad7940, ftLastWriteTime.dwHighDateTime=0x1d5eb2a, nFileSizeHigh=0x0, nFileSizeLow=0xed32, dwReserved0=0x0, dwReserved1=0x0, cFileName="tsjb.bmp", cAlternateFileName="")) returned 1 [0117.105] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2b4ffa0, ftCreationTime.dwHighDateTime=0x1d5e82c, ftLastAccessTime.dwLowDateTime=0xb50c97c0, ftLastAccessTime.dwHighDateTime=0x1d5e50b, ftLastWriteTime.dwLowDateTime=0xb50c97c0, ftLastWriteTime.dwHighDateTime=0x1d5e50b, nFileSizeHigh=0x0, nFileSizeLow=0x21ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="vWWoorik8.gif", cAlternateFileName="VWWOOR~1.GIF")) returned 1 [0117.105] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c175b0, ftCreationTime.dwHighDateTime=0x1d5ee1d, ftLastAccessTime.dwLowDateTime=0x6f35eab0, ftLastAccessTime.dwHighDateTime=0x1d5ed87, ftLastWriteTime.dwLowDateTime=0x6f35eab0, ftLastWriteTime.dwHighDateTime=0x1d5ed87, nFileSizeHigh=0x0, nFileSizeLow=0x144f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wh 5WIYWVVePs.bmp", cAlternateFileName="WH5WIY~1.BMP")) returned 1 [0117.105] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be5bf70, ftCreationTime.dwHighDateTime=0x1d5e5c5, ftLastAccessTime.dwLowDateTime=0x44ea940, ftLastAccessTime.dwHighDateTime=0x1d5e66f, ftLastWriteTime.dwLowDateTime=0x44ea940, ftLastWriteTime.dwHighDateTime=0x1d5e66f, nFileSizeHigh=0x0, nFileSizeLow=0xa16d, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmm4L4s2nF.png", cAlternateFileName="XMM4L4~1.PNG")) returned 1 [0117.105] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.105] FindClose (in: hFindFile=0x7eb150 | out: hFindFile=0x7eb150) returned 1 [0117.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0117.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0117.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0117.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp", lpFilePart=0x0) returned 0x29 [0117.106] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb023cd30, ftCreationTime.dwHighDateTime=0x1d5e87d, ftLastAccessTime.dwLowDateTime=0x66787080, ftLastAccessTime.dwHighDateTime=0x1d5e8ed, ftLastWriteTime.dwLowDateTime=0x66787080, ftLastWriteTime.dwHighDateTime=0x1d5e8ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eafd0 [0117.106] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb023cd30, ftCreationTime.dwHighDateTime=0x1d5e87d, ftLastAccessTime.dwLowDateTime=0x66787080, ftLastAccessTime.dwHighDateTime=0x1d5e8ed, ftLastWriteTime.dwLowDateTime=0x66787080, ftLastWriteTime.dwHighDateTime=0x1d5e8ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.106] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17bcf9b0, ftCreationTime.dwHighDateTime=0x1d5ef15, ftLastAccessTime.dwLowDateTime=0xa1115520, ftLastAccessTime.dwHighDateTime=0x1d5e13d, ftLastWriteTime.dwLowDateTime=0xa1115520, ftLastWriteTime.dwHighDateTime=0x1d5e13d, nFileSizeHigh=0x0, nFileSizeLow=0x47e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="1oQx2PlaY_9.png", cAlternateFileName="1OQX2P~1.PNG")) returned 1 [0117.106] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6bd4760, ftCreationTime.dwHighDateTime=0x1d5eb1f, ftLastAccessTime.dwLowDateTime=0x77ab4930, ftLastAccessTime.dwHighDateTime=0x1d5eb9b, ftLastWriteTime.dwLowDateTime=0x77ab4930, ftLastWriteTime.dwHighDateTime=0x1d5eb9b, nFileSizeHigh=0x0, nFileSizeLow=0xde20, dwReserved0=0x0, dwReserved1=0x0, cFileName="6PJmK 8_RW.gif", cAlternateFileName="6PJMK8~1.GIF")) returned 1 [0117.107] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a516c80, ftCreationTime.dwHighDateTime=0x1d5e3df, ftLastAccessTime.dwLowDateTime=0x22a20c60, ftLastAccessTime.dwHighDateTime=0x1d5e0b7, ftLastWriteTime.dwLowDateTime=0x22a20c60, ftLastWriteTime.dwHighDateTime=0x1d5e0b7, nFileSizeHigh=0x0, nFileSizeLow=0x11822, dwReserved0=0x0, dwReserved1=0x0, cFileName="9nPz82rQ.png", cAlternateFileName="")) returned 1 [0117.107] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4720f50, ftCreationTime.dwHighDateTime=0x1d5eb55, ftLastAccessTime.dwLowDateTime=0x99c0cbd0, ftLastAccessTime.dwHighDateTime=0x1d5e9b1, ftLastWriteTime.dwLowDateTime=0x99c0cbd0, ftLastWriteTime.dwHighDateTime=0x1d5e9b1, nFileSizeHigh=0x0, nFileSizeLow=0x8d4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BgEHQ.png", cAlternateFileName="")) returned 1 [0117.107] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2682b8e0, ftCreationTime.dwHighDateTime=0x1d5e560, ftLastAccessTime.dwLowDateTime=0x1de6e310, ftLastAccessTime.dwHighDateTime=0x1d5e21c, ftLastWriteTime.dwLowDateTime=0x1de6e310, ftLastWriteTime.dwHighDateTime=0x1d5e21c, nFileSizeHigh=0x0, nFileSizeLow=0x43d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bSC kTfZMTui.gif", cAlternateFileName="BSCKTF~1.GIF")) returned 1 [0117.107] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17796120, ftCreationTime.dwHighDateTime=0x1d5eb1c, ftLastAccessTime.dwLowDateTime=0xe8fbe5a0, ftLastAccessTime.dwHighDateTime=0x1d5e357, ftLastWriteTime.dwLowDateTime=0xe8fbe5a0, ftLastWriteTime.dwHighDateTime=0x1d5e357, nFileSizeHigh=0x0, nFileSizeLow=0x17d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="p RB5lEb.gif", cAlternateFileName="PRB5LE~1.GIF")) returned 1 [0117.107] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9559a00, ftCreationTime.dwHighDateTime=0x1d5e5aa, ftLastAccessTime.dwLowDateTime=0xd28177c0, ftLastAccessTime.dwHighDateTime=0x1d5e714, ftLastWriteTime.dwLowDateTime=0xd28177c0, ftLastWriteTime.dwHighDateTime=0x1d5e714, nFileSizeHigh=0x0, nFileSizeLow=0x9428, dwReserved0=0x0, dwReserved1=0x0, cFileName="pLH1ise1tB G4DS1Ax.gif", cAlternateFileName="PLH1IS~1.GIF")) returned 1 [0117.108] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9b1a800, ftCreationTime.dwHighDateTime=0x1d5e5f1, ftLastAccessTime.dwLowDateTime=0xf1fcefe0, ftLastAccessTime.dwHighDateTime=0x1d5eff1, ftLastWriteTime.dwLowDateTime=0xf1fcefe0, ftLastWriteTime.dwHighDateTime=0x1d5eff1, nFileSizeHigh=0x0, nFileSizeLow=0xdab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PR90ydljK32vzDgk6.gif", cAlternateFileName="PR90YD~1.GIF")) returned 1 [0117.108] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5d52360, ftCreationTime.dwHighDateTime=0x1d5eb43, ftLastAccessTime.dwLowDateTime=0x51de6960, ftLastAccessTime.dwHighDateTime=0x1d5ec10, ftLastWriteTime.dwLowDateTime=0x51de6960, ftLastWriteTime.dwHighDateTime=0x1d5ec10, nFileSizeHigh=0x0, nFileSizeLow=0xdf43, dwReserved0=0x0, dwReserved1=0x0, cFileName="QQoT8tuRcptR.png", cAlternateFileName="QQOT8T~1.PNG")) returned 1 [0117.108] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d1b2ce0, ftCreationTime.dwHighDateTime=0x1d5e22f, ftLastAccessTime.dwLowDateTime=0x24ad7940, ftLastAccessTime.dwHighDateTime=0x1d5eb2a, ftLastWriteTime.dwLowDateTime=0x24ad7940, ftLastWriteTime.dwHighDateTime=0x1d5eb2a, nFileSizeHigh=0x0, nFileSizeLow=0xed32, dwReserved0=0x0, dwReserved1=0x0, cFileName="tsjb.bmp", cAlternateFileName="")) returned 1 [0117.108] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2b4ffa0, ftCreationTime.dwHighDateTime=0x1d5e82c, ftLastAccessTime.dwLowDateTime=0xb50c97c0, ftLastAccessTime.dwHighDateTime=0x1d5e50b, ftLastWriteTime.dwLowDateTime=0xb50c97c0, ftLastWriteTime.dwHighDateTime=0x1d5e50b, nFileSizeHigh=0x0, nFileSizeLow=0x21ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="vWWoorik8.gif", cAlternateFileName="VWWOOR~1.GIF")) returned 1 [0117.108] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c175b0, ftCreationTime.dwHighDateTime=0x1d5ee1d, ftLastAccessTime.dwLowDateTime=0x6f35eab0, ftLastAccessTime.dwHighDateTime=0x1d5ed87, ftLastWriteTime.dwLowDateTime=0x6f35eab0, ftLastWriteTime.dwHighDateTime=0x1d5ed87, nFileSizeHigh=0x0, nFileSizeLow=0x144f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wh 5WIYWVVePs.bmp", cAlternateFileName="WH5WIY~1.BMP")) returned 1 [0117.109] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be5bf70, ftCreationTime.dwHighDateTime=0x1d5e5c5, ftLastAccessTime.dwLowDateTime=0x44ea940, ftLastAccessTime.dwHighDateTime=0x1d5e66f, ftLastWriteTime.dwLowDateTime=0x44ea940, ftLastWriteTime.dwHighDateTime=0x1d5e66f, nFileSizeHigh=0x0, nFileSizeLow=0xa16d, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmm4L4s2nF.png", cAlternateFileName="XMM4L4~1.PNG")) returned 1 [0117.109] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be5bf70, ftCreationTime.dwHighDateTime=0x1d5e5c5, ftLastAccessTime.dwLowDateTime=0x44ea940, ftLastAccessTime.dwHighDateTime=0x1d5e66f, ftLastWriteTime.dwLowDateTime=0x44ea940, ftLastWriteTime.dwHighDateTime=0x1d5e66f, nFileSizeHigh=0x0, nFileSizeLow=0xa16d, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmm4L4s2nF.png", cAlternateFileName="XMM4L4~1.PNG")) returned 0 [0117.109] FindClose (in: hFindFile=0x7eafd0 | out: hFindFile=0x7eafd0) returned 1 [0117.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0117.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0117.109] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png", lpFilePart=0x0) returned 0x39 [0117.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0117.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\1oqx2play_9.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.110] GetFileType (hFile=0x404) returned 0x1 [0117.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0117.110] GetFileType (hFile=0x404) returned 0x1 [0117.110] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x47e4 [0117.110] ReadFile (in: hFile=0x404, lpBuffer=0x249121c, nNumberOfBytesToRead=0x47e4, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x249121c*, lpNumberOfBytesRead=0x4fe778*=0x47e4, lpOverlapped=0x0) returned 1 [0117.111] CloseHandle (hObject=0x404) returned 1 [0117.147] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0117.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0117.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png", lpFilePart=0x0) returned 0x39 [0117.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0117.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\1oqx2play_9.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.149] GetFileType (hFile=0x404) returned 0x1 [0117.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0117.149] GetFileType (hFile=0x404) returned 0x1 [0117.149] WriteFile (in: hFile=0x404, lpBuffer=0x24f47b4*, nNumberOfBytesToWrite=0x47f0, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x24f47b4*, lpNumberOfBytesWritten=0x4fe76c*=0x47f0, lpOverlapped=0x0) returned 1 [0117.150] CloseHandle (hObject=0x404) returned 1 [0117.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png", lpFilePart=0x0) returned 0x39 [0117.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png.klavins", lpFilePart=0x0) returned 0x41 [0117.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0117.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\1oqx2play_9.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17bcf9b0, ftCreationTime.dwHighDateTime=0x1d5ef15, ftLastAccessTime.dwLowDateTime=0xa1115520, ftLastAccessTime.dwHighDateTime=0x1d5e13d, ftLastWriteTime.dwLowDateTime=0x87ea1ff4, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x47f0)) returned 1 [0117.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0117.152] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\1oqx2play_9.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\1oQx2PlaY_9.png.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\1oqx2play_9.png.klavins")) returned 1 [0117.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png", lpFilePart=0x0) returned 0x36 [0117.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0117.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\9npz82rq.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.153] GetFileType (hFile=0x404) returned 0x1 [0117.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0117.154] GetFileType (hFile=0x404) returned 0x1 [0117.154] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x11822 [0117.154] ReadFile (in: hFile=0x404, lpBuffer=0x24f94ac, nNumberOfBytesToRead=0x11822, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x24f94ac*, lpNumberOfBytesRead=0x4fe778*=0x11822, lpOverlapped=0x0) returned 1 [0117.155] CloseHandle (hObject=0x404) returned 1 [0117.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0117.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0117.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png", lpFilePart=0x0) returned 0x36 [0117.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0117.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\9npz82rq.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.179] GetFileType (hFile=0x404) returned 0x1 [0117.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0117.179] GetFileType (hFile=0x404) returned 0x1 [0117.179] WriteFile (in: hFile=0x404, lpBuffer=0x257ab3c*, nNumberOfBytesToWrite=0x11830, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x257ab3c*, lpNumberOfBytesWritten=0x4fe76c*=0x11830, lpOverlapped=0x0) returned 1 [0117.181] CloseHandle (hObject=0x404) returned 1 [0117.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png", lpFilePart=0x0) returned 0x36 [0117.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png.klavins", lpFilePart=0x0) returned 0x3e [0117.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0117.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\9npz82rq.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a516c80, ftCreationTime.dwHighDateTime=0x1d5e3df, ftLastAccessTime.dwLowDateTime=0x22a20c60, ftLastAccessTime.dwHighDateTime=0x1d5e0b7, ftLastWriteTime.dwLowDateTime=0x87eee562, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x11830)) returned 1 [0117.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0117.184] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\9npz82rq.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\9nPz82rQ.png.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\9npz82rq.png.klavins")) returned 1 [0117.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png", lpFilePart=0x0) returned 0x33 [0117.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0117.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\bgehq.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.185] GetFileType (hFile=0x404) returned 0x1 [0117.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0117.185] GetFileType (hFile=0x404) returned 0x1 [0117.185] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x8d4c [0117.185] ReadFile (in: hFile=0x404, lpBuffer=0x258c838, nNumberOfBytesToRead=0x8d4c, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x258c838*, lpNumberOfBytesRead=0x4fe778*=0x8d4c, lpOverlapped=0x0) returned 1 [0117.186] CloseHandle (hObject=0x404) returned 1 [0117.227] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0117.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0117.227] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png", lpFilePart=0x0) returned 0x33 [0117.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0117.227] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\bgehq.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.229] GetFileType (hFile=0x404) returned 0x1 [0117.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0117.229] GetFileType (hFile=0x404) returned 0x1 [0117.229] WriteFile (in: hFile=0x404, lpBuffer=0x2404898*, nNumberOfBytesToWrite=0x8d50, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x2404898*, lpNumberOfBytesWritten=0x4fe76c*=0x8d50, lpOverlapped=0x0) returned 1 [0117.230] CloseHandle (hObject=0x404) returned 1 [0117.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png", lpFilePart=0x0) returned 0x33 [0117.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png.klavins", lpFilePart=0x0) returned 0x3b [0117.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0117.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\bgehq.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4720f50, ftCreationTime.dwHighDateTime=0x1d5eb55, ftLastAccessTime.dwLowDateTime=0x99c0cbd0, ftLastAccessTime.dwHighDateTime=0x1d5e9b1, ftLastWriteTime.dwLowDateTime=0x87f60c99, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x8d50)) returned 1 [0117.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0117.232] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\bgehq.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\BgEHQ.png.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\bgehq.png.klavins")) returned 1 [0117.233] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png", lpFilePart=0x0) returned 0x3a [0117.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0117.233] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\qqot8turcptr.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.233] GetFileType (hFile=0x404) returned 0x1 [0117.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0117.233] GetFileType (hFile=0x404) returned 0x1 [0117.233] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0xdf43 [0117.233] ReadFile (in: hFile=0x404, lpBuffer=0x240db0c, nNumberOfBytesToRead=0xdf43, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x240db0c*, lpNumberOfBytesRead=0x4fe778*=0xdf43, lpOverlapped=0x0) returned 1 [0117.235] CloseHandle (hObject=0x404) returned 1 [0117.297] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0117.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0117.298] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png", lpFilePart=0x0) returned 0x3a [0117.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0117.298] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\qqot8turcptr.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.299] GetFileType (hFile=0x404) returned 0x1 [0117.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0117.299] GetFileType (hFile=0x404) returned 0x1 [0117.299] WriteFile (in: hFile=0x404, lpBuffer=0x2484858*, nNumberOfBytesToWrite=0xdf50, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x2484858*, lpNumberOfBytesWritten=0x4fe76c*=0xdf50, lpOverlapped=0x0) returned 1 [0117.301] CloseHandle (hObject=0x404) returned 1 [0117.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png", lpFilePart=0x0) returned 0x3a [0117.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png.klavins", lpFilePart=0x0) returned 0x42 [0117.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0117.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\qqot8turcptr.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5d52360, ftCreationTime.dwHighDateTime=0x1d5eb43, ftLastAccessTime.dwLowDateTime=0x51de6960, ftLastAccessTime.dwHighDateTime=0x1d5ec10, ftLastWriteTime.dwLowDateTime=0x8801ff93, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xdf50)) returned 1 [0117.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0117.304] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\qqot8turcptr.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\QQoT8tuRcptR.png.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\qqot8turcptr.png.klavins")) returned 1 [0117.304] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp", lpFilePart=0x0) returned 0x32 [0117.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0117.304] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\tsjb.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.304] GetFileType (hFile=0x404) returned 0x1 [0117.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0117.305] GetFileType (hFile=0x404) returned 0x1 [0117.305] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0xed32 [0117.305] ReadFile (in: hFile=0x404, lpBuffer=0x2492c9c, nNumberOfBytesToRead=0xed32, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x2492c9c*, lpNumberOfBytesRead=0x4fe778*=0xed32, lpOverlapped=0x0) returned 1 [0117.306] CloseHandle (hObject=0x404) returned 1 [0117.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0117.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0117.330] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp", lpFilePart=0x0) returned 0x32 [0117.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0117.330] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\tsjb.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.331] GetFileType (hFile=0x404) returned 0x1 [0117.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0117.331] GetFileType (hFile=0x404) returned 0x1 [0117.331] WriteFile (in: hFile=0x404, lpBuffer=0x250c25c*, nNumberOfBytesToWrite=0xed40, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x250c25c*, lpNumberOfBytesWritten=0x4fe76c*=0xed40, lpOverlapped=0x0) returned 1 [0117.333] CloseHandle (hObject=0x404) returned 1 [0117.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp", lpFilePart=0x0) returned 0x32 [0117.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp.klavins", lpFilePart=0x0) returned 0x3a [0117.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0117.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\tsjb.bmp"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d1b2ce0, ftCreationTime.dwHighDateTime=0x1d5e22f, ftLastAccessTime.dwLowDateTime=0x24ad7940, ftLastAccessTime.dwHighDateTime=0x1d5eb2a, ftLastWriteTime.dwLowDateTime=0x8806bc89, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xed40)) returned 1 [0117.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0117.336] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\tsjb.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\tsjb.bmp.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\tsjb.bmp.klavins")) returned 1 [0117.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp", lpFilePart=0x0) returned 0x3b [0117.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0117.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\wh 5wiywvveps.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.336] GetFileType (hFile=0x404) returned 0x1 [0117.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0117.337] GetFileType (hFile=0x404) returned 0x1 [0117.337] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x144f0 [0117.337] ReadFile (in: hFile=0x404, lpBuffer=0x251b478, nNumberOfBytesToRead=0x144f0, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x251b478*, lpNumberOfBytesRead=0x4fe778*=0x144f0, lpOverlapped=0x0) returned 1 [0117.338] CloseHandle (hObject=0x404) returned 1 [0117.462] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0117.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0117.462] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp", lpFilePart=0x0) returned 0x3b [0117.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0117.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\wh 5wiywvveps.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.465] GetFileType (hFile=0x404) returned 0x1 [0117.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0117.465] GetFileType (hFile=0x404) returned 0x1 [0117.465] WriteFile (in: hFile=0x404, lpBuffer=0x25a5174*, nNumberOfBytesToWrite=0x14500, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x25a5174*, lpNumberOfBytesWritten=0x4fe76c*=0x14500, lpOverlapped=0x0) returned 1 [0117.468] CloseHandle (hObject=0x404) returned 1 [0117.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp", lpFilePart=0x0) returned 0x3b [0117.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp.klavins", lpFilePart=0x0) returned 0x43 [0117.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0117.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\wh 5wiywvveps.bmp"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c175b0, ftCreationTime.dwHighDateTime=0x1d5ee1d, ftLastAccessTime.dwLowDateTime=0x6f35eab0, ftLastAccessTime.dwHighDateTime=0x1d5ed87, ftLastWriteTime.dwLowDateTime=0x881c324e, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x14500)) returned 1 [0117.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0117.472] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\wh 5wiywvveps.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\wh 5WIYWVVePs.bmp.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\wh 5wiywvveps.bmp.klavins")) returned 1 [0117.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png", lpFilePart=0x0) returned 0x38 [0117.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0117.481] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\xmm4l4s2nf.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.481] GetFileType (hFile=0x404) returned 0x1 [0117.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0117.481] GetFileType (hFile=0x404) returned 0x1 [0117.481] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0xa16d [0117.481] ReadFile (in: hFile=0x404, lpBuffer=0x25b9b80, nNumberOfBytesToRead=0xa16d, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x25b9b80*, lpNumberOfBytesRead=0x4fe778*=0xa16d, lpOverlapped=0x0) returned 1 [0117.483] CloseHandle (hObject=0x404) returned 1 [0117.631] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0117.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0117.632] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png", lpFilePart=0x0) returned 0x38 [0117.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0117.632] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\xmm4l4s2nf.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.634] GetFileType (hFile=0x404) returned 0x1 [0117.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0117.634] GetFileType (hFile=0x404) returned 0x1 [0117.634] WriteFile (in: hFile=0x404, lpBuffer=0x24313b0*, nNumberOfBytesToWrite=0xa170, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x24313b0*, lpNumberOfBytesWritten=0x4fe76c*=0xa170, lpOverlapped=0x0) returned 1 [0117.636] CloseHandle (hObject=0x404) returned 1 [0117.638] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png", lpFilePart=0x0) returned 0x38 [0117.638] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png.klavins", lpFilePart=0x0) returned 0x40 [0117.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0117.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\xmm4l4s2nf.png"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be5bf70, ftCreationTime.dwHighDateTime=0x1d5e5c5, ftLastAccessTime.dwLowDateTime=0x44ea940, ftLastAccessTime.dwHighDateTime=0x1d5e66f, ftLastWriteTime.dwLowDateTime=0x88340aee, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xa170)) returned 1 [0117.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0117.639] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\xmm4l4s2nf.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\oZXDrM3YMlGZ8Vdp\\xmm4L4s2nF.png.klavins" (normalized: "c:\\users\\fd1hvy\\pictures\\ozxdrm3ymlgz8vdp\\xmm4l4s2nf.png.klavins")) returned 1 [0117.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0117.641] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x27 [0117.641] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb2d0 [0117.642] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.643] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.643] FindNextFileW (in: hFindFile=0x7eb2d0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.643] FindClose (in: hFindFile=0x7eb2d0 | out: hFindFile=0x7eb2d0) returned 1 [0117.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0117.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0117.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0117.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x27 [0117.643] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eafd0 [0117.644] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.644] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.644] FindNextFileW (in: hFindFile=0x7eafd0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0117.644] FindClose (in: hFindFile=0x7eafd0 | out: hFindFile=0x7eafd0) returned 1 [0117.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0117.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0117.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0117.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music", lpFilePart=0x0) returned 0x15 [0117.645] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe71c87bc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71c87bc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb150 [0117.645] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe71c87bc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71c87bc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.645] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40afc220, ftCreationTime.dwHighDateTime=0x1d5e44e, ftLastAccessTime.dwLowDateTime=0x494a5fa0, ftLastAccessTime.dwHighDateTime=0x1d5e2d5, ftLastWriteTime.dwLowDateTime=0x494a5fa0, ftLastWriteTime.dwHighDateTime=0x1d5e2d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8xhRDpIXkQ", cAlternateFileName="8XHRDP~1")) returned 1 [0117.646] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.646] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12772940, ftCreationTime.dwHighDateTime=0x1d5e78a, ftLastAccessTime.dwLowDateTime=0xa56bfc80, ftLastAccessTime.dwHighDateTime=0x1d5e5fa, ftLastWriteTime.dwLowDateTime=0xa56bfc80, ftLastWriteTime.dwHighDateTime=0x1d5e5fa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="I6ukkqQO3s-oI", cAlternateFileName="I6UKKQ~1")) returned 1 [0117.646] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf684e0, ftCreationTime.dwHighDateTime=0x1d5ea7f, ftLastAccessTime.dwLowDateTime=0xebe9cdd0, ftLastAccessTime.dwHighDateTime=0x1d5e407, ftLastWriteTime.dwLowDateTime=0xebe9cdd0, ftLastWriteTime.dwHighDateTime=0x1d5e407, nFileSizeHigh=0x0, nFileSizeLow=0x16ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="iKECI Sy8.m4a", cAlternateFileName="IKECIS~1.M4A")) returned 1 [0117.646] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98c78d50, ftCreationTime.dwHighDateTime=0x1d5e604, ftLastAccessTime.dwLowDateTime=0x7369a1c0, ftLastAccessTime.dwHighDateTime=0x1d5efd6, ftLastWriteTime.dwLowDateTime=0x7369a1c0, ftLastWriteTime.dwHighDateTime=0x1d5efd6, nFileSizeHigh=0x0, nFileSizeLow=0x16cab, dwReserved0=0x0, dwReserved1=0x0, cFileName="S6eyKYGkszOpo_Wns.mp3", cAlternateFileName="S6EYKY~1.MP3")) returned 1 [0117.646] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56133900, ftCreationTime.dwHighDateTime=0x1d5ea19, ftLastAccessTime.dwLowDateTime=0x28645450, ftLastAccessTime.dwHighDateTime=0x1d5e788, ftLastWriteTime.dwLowDateTime=0x28645450, ftLastWriteTime.dwHighDateTime=0x1d5e788, nFileSizeHigh=0x0, nFileSizeLow=0x8711, dwReserved0=0x0, dwReserved1=0x0, cFileName="W5Alr0Kaf.m4a", cAlternateFileName="W5ALR0~1.M4A")) returned 1 [0117.647] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe25ddd30, ftCreationTime.dwHighDateTime=0x1d5e7ca, ftLastAccessTime.dwLowDateTime=0x71802150, ftLastAccessTime.dwHighDateTime=0x1d5ea30, ftLastWriteTime.dwLowDateTime=0x71802150, ftLastWriteTime.dwHighDateTime=0x1d5ea30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WLmCv", cAlternateFileName="")) returned 1 [0117.647] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15e9b030, ftCreationTime.dwHighDateTime=0x1d5e789, ftLastAccessTime.dwLowDateTime=0x8812f8a0, ftLastAccessTime.dwHighDateTime=0x1d5eae6, ftLastWriteTime.dwLowDateTime=0x8812f8a0, ftLastWriteTime.dwHighDateTime=0x1d5eae6, nFileSizeHigh=0x0, nFileSizeLow=0x18046, dwReserved0=0x0, dwReserved1=0x0, cFileName="zPvf.mp3", cAlternateFileName="")) returned 1 [0117.647] FindNextFileW (in: hFindFile=0x7eb150, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.647] FindClose (in: hFindFile=0x7eb150 | out: hFindFile=0x7eb150) returned 1 [0117.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0117.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0117.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0117.647] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music", lpFilePart=0x0) returned 0x15 [0117.648] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe71c87bc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71c87bc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7eb350 [0117.648] FindNextFileW (in: hFindFile=0x7eb350, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe71c87bc, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe71c87bc, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.648] FindNextFileW (in: hFindFile=0x7eb350, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40afc220, ftCreationTime.dwHighDateTime=0x1d5e44e, ftLastAccessTime.dwLowDateTime=0x494a5fa0, ftLastAccessTime.dwHighDateTime=0x1d5e2d5, ftLastWriteTime.dwLowDateTime=0x494a5fa0, ftLastWriteTime.dwHighDateTime=0x1d5e2d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8xhRDpIXkQ", cAlternateFileName="8XHRDP~1")) returned 1 [0117.648] FindNextFileW (in: hFindFile=0x7eb350, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0117.648] FindNextFileW (in: hFindFile=0x7eb350, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12772940, ftCreationTime.dwHighDateTime=0x1d5e78a, ftLastAccessTime.dwLowDateTime=0xa56bfc80, ftLastAccessTime.dwHighDateTime=0x1d5e5fa, ftLastWriteTime.dwLowDateTime=0xa56bfc80, ftLastWriteTime.dwHighDateTime=0x1d5e5fa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="I6ukkqQO3s-oI", cAlternateFileName="I6UKKQ~1")) returned 1 [0117.649] FindNextFileW (in: hFindFile=0x7eb350, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bf684e0, ftCreationTime.dwHighDateTime=0x1d5ea7f, ftLastAccessTime.dwLowDateTime=0xebe9cdd0, ftLastAccessTime.dwHighDateTime=0x1d5e407, ftLastWriteTime.dwLowDateTime=0xebe9cdd0, ftLastWriteTime.dwHighDateTime=0x1d5e407, nFileSizeHigh=0x0, nFileSizeLow=0x16ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="iKECI Sy8.m4a", cAlternateFileName="IKECIS~1.M4A")) returned 1 [0117.649] FindNextFileW (in: hFindFile=0x7eb350, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98c78d50, ftCreationTime.dwHighDateTime=0x1d5e604, ftLastAccessTime.dwLowDateTime=0x7369a1c0, ftLastAccessTime.dwHighDateTime=0x1d5efd6, ftLastWriteTime.dwLowDateTime=0x7369a1c0, ftLastWriteTime.dwHighDateTime=0x1d5efd6, nFileSizeHigh=0x0, nFileSizeLow=0x16cab, dwReserved0=0x0, dwReserved1=0x0, cFileName="S6eyKYGkszOpo_Wns.mp3", cAlternateFileName="S6EYKY~1.MP3")) returned 1 [0117.649] FindNextFileW (in: hFindFile=0x7eb350, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56133900, ftCreationTime.dwHighDateTime=0x1d5ea19, ftLastAccessTime.dwLowDateTime=0x28645450, ftLastAccessTime.dwHighDateTime=0x1d5e788, ftLastWriteTime.dwLowDateTime=0x28645450, ftLastWriteTime.dwHighDateTime=0x1d5e788, nFileSizeHigh=0x0, nFileSizeLow=0x8711, dwReserved0=0x0, dwReserved1=0x0, cFileName="W5Alr0Kaf.m4a", cAlternateFileName="W5ALR0~1.M4A")) returned 1 [0117.650] FindNextFileW (in: hFindFile=0x7eb350, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe25ddd30, ftCreationTime.dwHighDateTime=0x1d5e7ca, ftLastAccessTime.dwLowDateTime=0x71802150, ftLastAccessTime.dwHighDateTime=0x1d5ea30, ftLastWriteTime.dwLowDateTime=0x71802150, ftLastWriteTime.dwHighDateTime=0x1d5ea30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WLmCv", cAlternateFileName="")) returned 1 [0117.650] FindNextFileW (in: hFindFile=0x7eb350, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15e9b030, ftCreationTime.dwHighDateTime=0x1d5e789, ftLastAccessTime.dwLowDateTime=0x8812f8a0, ftLastAccessTime.dwHighDateTime=0x1d5eae6, ftLastWriteTime.dwLowDateTime=0x8812f8a0, ftLastWriteTime.dwHighDateTime=0x1d5eae6, nFileSizeHigh=0x0, nFileSizeLow=0x18046, dwReserved0=0x0, dwReserved1=0x0, cFileName="zPvf.mp3", cAlternateFileName="")) returned 1 [0117.650] FindNextFileW (in: hFindFile=0x7eb350, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15e9b030, ftCreationTime.dwHighDateTime=0x1d5e789, ftLastAccessTime.dwLowDateTime=0x8812f8a0, ftLastAccessTime.dwHighDateTime=0x1d5eae6, ftLastWriteTime.dwLowDateTime=0x8812f8a0, ftLastWriteTime.dwHighDateTime=0x1d5eae6, nFileSizeHigh=0x0, nFileSizeLow=0x18046, dwReserved0=0x0, dwReserved1=0x0, cFileName="zPvf.mp3", cAlternateFileName="")) returned 0 [0117.650] FindClose (in: hFindFile=0x7eb350 | out: hFindFile=0x7eb350) returned 1 [0117.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0117.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0117.650] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3", lpFilePart=0x0) returned 0x2b [0117.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0117.650] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3" (normalized: "c:\\users\\fd1hvy\\music\\s6eykygkszopo_wns.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.651] GetFileType (hFile=0x404) returned 0x1 [0117.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0117.651] GetFileType (hFile=0x404) returned 0x1 [0117.651] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x16cab [0117.652] ReadFile (in: hFile=0x404, lpBuffer=0x3627628, nNumberOfBytesToRead=0x16cab, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x3627628*, lpNumberOfBytesRead=0x4fe7ec*=0x16cab, lpOverlapped=0x0) returned 1 [0117.655] CloseHandle (hObject=0x404) returned 1 [0117.694] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0117.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0117.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3", lpFilePart=0x0) returned 0x2b [0117.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0117.695] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3" (normalized: "c:\\users\\fd1hvy\\music\\s6eykygkszopo_wns.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.697] GetFileType (hFile=0x404) returned 0x1 [0117.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0117.697] GetFileType (hFile=0x404) returned 0x1 [0117.697] WriteFile (in: hFile=0x404, lpBuffer=0x36995d0*, nNumberOfBytesToWrite=0x16cb0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x36995d0*, lpNumberOfBytesWritten=0x4fe7e0*=0x16cb0, lpOverlapped=0x0) returned 1 [0117.700] CloseHandle (hObject=0x404) returned 1 [0117.705] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3", lpFilePart=0x0) returned 0x2b [0117.706] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3.klavins", lpFilePart=0x0) returned 0x33 [0117.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0117.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3" (normalized: "c:\\users\\fd1hvy\\music\\s6eykygkszopo_wns.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98c78d50, ftCreationTime.dwHighDateTime=0x1d5e604, ftLastAccessTime.dwLowDateTime=0x7369a1c0, ftLastAccessTime.dwHighDateTime=0x1d5efd6, ftLastWriteTime.dwLowDateTime=0x88401e5d, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x16cb0)) returned 1 [0117.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0117.706] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3" (normalized: "c:\\users\\fd1hvy\\music\\s6eykygkszopo_wns.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\S6eyKYGkszOpo_Wns.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\music\\s6eykygkszopo_wns.mp3.klavins")) returned 1 [0117.707] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\zPvf.mp3", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\zPvf.mp3", lpFilePart=0x0) returned 0x1e [0117.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0117.707] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\zPvf.mp3" (normalized: "c:\\users\\fd1hvy\\music\\zpvf.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.707] GetFileType (hFile=0x404) returned 0x1 [0117.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0117.707] GetFileType (hFile=0x404) returned 0x1 [0117.707] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x18046 [0117.729] ReadFile (in: hFile=0x404, lpBuffer=0x33a1a48, nNumberOfBytesToRead=0x18046, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x33a1a48*, lpNumberOfBytesRead=0x4fe7ec*=0x18046, lpOverlapped=0x0) returned 1 [0117.731] CloseHandle (hObject=0x404) returned 1 [0117.893] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0117.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0117.894] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\zPvf.mp3", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\zPvf.mp3", lpFilePart=0x0) returned 0x1e [0117.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0117.894] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\zPvf.mp3" (normalized: "c:\\users\\fd1hvy\\music\\zpvf.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.895] GetFileType (hFile=0x404) returned 0x1 [0117.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0117.895] GetFileType (hFile=0x404) returned 0x1 [0117.895] WriteFile (in: hFile=0x404, lpBuffer=0x3419c10*, nNumberOfBytesToWrite=0x18050, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x3419c10*, lpNumberOfBytesWritten=0x4fe7e0*=0x18050, lpOverlapped=0x0) returned 1 [0117.898] CloseHandle (hObject=0x404) returned 1 [0117.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\zPvf.mp3", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\zPvf.mp3", lpFilePart=0x0) returned 0x1e [0117.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\zPvf.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\zPvf.mp3.klavins", lpFilePart=0x0) returned 0x26 [0117.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0117.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\zPvf.mp3" (normalized: "c:\\users\\fd1hvy\\music\\zpvf.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15e9b030, ftCreationTime.dwHighDateTime=0x1d5e789, ftLastAccessTime.dwLowDateTime=0x8812f8a0, ftLastAccessTime.dwHighDateTime=0x1d5eae6, ftLastWriteTime.dwLowDateTime=0x885c9290, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x18050)) returned 1 [0117.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0117.902] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\zPvf.mp3" (normalized: "c:\\users\\fd1hvy\\music\\zpvf.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\zPvf.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\music\\zpvf.mp3.klavins")) returned 1 [0117.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0117.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ", lpFilePart=0x0) returned 0x20 [0117.903] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40afc220, ftCreationTime.dwHighDateTime=0x1d5e44e, ftLastAccessTime.dwLowDateTime=0x494a5fa0, ftLastAccessTime.dwHighDateTime=0x1d5e2d5, ftLastWriteTime.dwLowDateTime=0x494a5fa0, ftLastWriteTime.dwHighDateTime=0x1d5e2d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e080 [0117.904] FindNextFileW (in: hFindFile=0x77e080, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40afc220, ftCreationTime.dwHighDateTime=0x1d5e44e, ftLastAccessTime.dwLowDateTime=0x494a5fa0, ftLastAccessTime.dwHighDateTime=0x1d5e2d5, ftLastWriteTime.dwLowDateTime=0x494a5fa0, ftLastWriteTime.dwHighDateTime=0x1d5e2d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.904] FindNextFileW (in: hFindFile=0x77e080, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2233f80, ftCreationTime.dwHighDateTime=0x1d5ee4b, ftLastAccessTime.dwLowDateTime=0x344154f0, ftLastAccessTime.dwHighDateTime=0x1d5ead8, ftLastWriteTime.dwLowDateTime=0x344154f0, ftLastWriteTime.dwHighDateTime=0x1d5ead8, nFileSizeHigh=0x0, nFileSizeLow=0x12d69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ay82dnBnZ0.mp3", cAlternateFileName="AY82DN~1.MP3")) returned 1 [0117.904] FindNextFileW (in: hFindFile=0x77e080, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe9e180, ftCreationTime.dwHighDateTime=0x1d5e0ef, ftLastAccessTime.dwLowDateTime=0x51567180, ftLastAccessTime.dwHighDateTime=0x1d5ec0c, ftLastWriteTime.dwLowDateTime=0x51567180, ftLastWriteTime.dwHighDateTime=0x1d5ec0c, nFileSizeHigh=0x0, nFileSizeLow=0xea59, dwReserved0=0x0, dwReserved1=0x0, cFileName="lfH2shKgnf8Z_d.wav", cAlternateFileName="LFH2SH~1.WAV")) returned 1 [0117.904] FindNextFileW (in: hFindFile=0x77e080, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb31b2a0, ftCreationTime.dwHighDateTime=0x1d5e741, ftLastAccessTime.dwLowDateTime=0xce09c420, ftLastAccessTime.dwHighDateTime=0x1d5e9fa, ftLastWriteTime.dwLowDateTime=0xce09c420, ftLastWriteTime.dwHighDateTime=0x1d5e9fa, nFileSizeHigh=0x0, nFileSizeLow=0x164f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mGcM_37f.m4a", cAlternateFileName="")) returned 1 [0117.904] FindNextFileW (in: hFindFile=0x77e080, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.904] FindClose (in: hFindFile=0x77e080 | out: hFindFile=0x77e080) returned 1 [0117.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0117.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0117.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0117.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ", lpFilePart=0x0) returned 0x20 [0117.905] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40afc220, ftCreationTime.dwHighDateTime=0x1d5e44e, ftLastAccessTime.dwLowDateTime=0x494a5fa0, ftLastAccessTime.dwHighDateTime=0x1d5e2d5, ftLastWriteTime.dwLowDateTime=0x494a5fa0, ftLastWriteTime.dwHighDateTime=0x1d5e2d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dc00 [0117.905] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40afc220, ftCreationTime.dwHighDateTime=0x1d5e44e, ftLastAccessTime.dwLowDateTime=0x494a5fa0, ftLastAccessTime.dwHighDateTime=0x1d5e2d5, ftLastWriteTime.dwLowDateTime=0x494a5fa0, ftLastWriteTime.dwHighDateTime=0x1d5e2d5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.905] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2233f80, ftCreationTime.dwHighDateTime=0x1d5ee4b, ftLastAccessTime.dwLowDateTime=0x344154f0, ftLastAccessTime.dwHighDateTime=0x1d5ead8, ftLastWriteTime.dwLowDateTime=0x344154f0, ftLastWriteTime.dwHighDateTime=0x1d5ead8, nFileSizeHigh=0x0, nFileSizeLow=0x12d69, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ay82dnBnZ0.mp3", cAlternateFileName="AY82DN~1.MP3")) returned 1 [0117.905] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe9e180, ftCreationTime.dwHighDateTime=0x1d5e0ef, ftLastAccessTime.dwLowDateTime=0x51567180, ftLastAccessTime.dwHighDateTime=0x1d5ec0c, ftLastWriteTime.dwLowDateTime=0x51567180, ftLastWriteTime.dwHighDateTime=0x1d5ec0c, nFileSizeHigh=0x0, nFileSizeLow=0xea59, dwReserved0=0x0, dwReserved1=0x0, cFileName="lfH2shKgnf8Z_d.wav", cAlternateFileName="LFH2SH~1.WAV")) returned 1 [0117.906] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb31b2a0, ftCreationTime.dwHighDateTime=0x1d5e741, ftLastAccessTime.dwLowDateTime=0xce09c420, ftLastAccessTime.dwHighDateTime=0x1d5e9fa, ftLastWriteTime.dwLowDateTime=0xce09c420, ftLastWriteTime.dwHighDateTime=0x1d5e9fa, nFileSizeHigh=0x0, nFileSizeLow=0x164f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mGcM_37f.m4a", cAlternateFileName="")) returned 1 [0117.906] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb31b2a0, ftCreationTime.dwHighDateTime=0x1d5e741, ftLastAccessTime.dwLowDateTime=0xce09c420, ftLastAccessTime.dwHighDateTime=0x1d5e9fa, ftLastWriteTime.dwLowDateTime=0xce09c420, ftLastWriteTime.dwHighDateTime=0x1d5e9fa, nFileSizeHigh=0x0, nFileSizeLow=0x164f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mGcM_37f.m4a", cAlternateFileName="")) returned 0 [0117.906] FindClose (in: hFindFile=0x77dc00 | out: hFindFile=0x77dc00) returned 1 [0117.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0117.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0117.906] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3", lpFilePart=0x0) returned 0x2f [0117.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0117.906] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3" (normalized: "c:\\users\\fd1hvy\\music\\8xhrdpixkq\\ay82dnbnz0.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.907] GetFileType (hFile=0x404) returned 0x1 [0117.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0117.907] GetFileType (hFile=0x404) returned 0x1 [0117.907] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x12d69 [0117.907] ReadFile (in: hFile=0x404, lpBuffer=0x24011f4, nNumberOfBytesToRead=0x12d69, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x24011f4*, lpNumberOfBytesRead=0x4fe778*=0x12d69, lpOverlapped=0x0) returned 1 [0117.908] CloseHandle (hObject=0x404) returned 1 [0117.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0117.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0117.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3", lpFilePart=0x0) returned 0x2f [0117.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0117.930] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3" (normalized: "c:\\users\\fd1hvy\\music\\8xhrdpixkq\\ay82dnbnz0.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.932] GetFileType (hFile=0x404) returned 0x1 [0117.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0117.932] GetFileType (hFile=0x404) returned 0x1 [0117.932] WriteFile (in: hFile=0x404, lpBuffer=0x2486844*, nNumberOfBytesToWrite=0x12d70, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x2486844*, lpNumberOfBytesWritten=0x4fe76c*=0x12d70, lpOverlapped=0x0) returned 1 [0117.934] CloseHandle (hObject=0x404) returned 1 [0117.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3", lpFilePart=0x0) returned 0x2f [0117.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3.klavins", lpFilePart=0x0) returned 0x37 [0117.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0117.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3" (normalized: "c:\\users\\fd1hvy\\music\\8xhrdpixkq\\ay82dnbnz0.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2233f80, ftCreationTime.dwHighDateTime=0x1d5ee4b, ftLastAccessTime.dwLowDateTime=0x344154f0, ftLastAccessTime.dwHighDateTime=0x1d5ead8, ftLastWriteTime.dwLowDateTime=0x8861562d, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x12d70)) returned 1 [0117.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0117.937] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3" (normalized: "c:\\users\\fd1hvy\\music\\8xhrdpixkq\\ay82dnbnz0.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\8xhRDpIXkQ\\Ay82dnBnZ0.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\music\\8xhrdpixkq\\ay82dnbnz0.mp3.klavins")) returned 1 [0117.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0117.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI", lpFilePart=0x0) returned 0x23 [0117.938] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12772940, ftCreationTime.dwHighDateTime=0x1d5e78a, ftLastAccessTime.dwLowDateTime=0xa56bfc80, ftLastAccessTime.dwHighDateTime=0x1d5e5fa, ftLastWriteTime.dwLowDateTime=0xa56bfc80, ftLastWriteTime.dwHighDateTime=0x1d5e5fa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dd80 [0117.938] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12772940, ftCreationTime.dwHighDateTime=0x1d5e78a, ftLastAccessTime.dwLowDateTime=0xa56bfc80, ftLastAccessTime.dwHighDateTime=0x1d5e5fa, ftLastWriteTime.dwLowDateTime=0xa56bfc80, ftLastWriteTime.dwHighDateTime=0x1d5e5fa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.939] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc09ecfc0, ftCreationTime.dwHighDateTime=0x1d5e3a5, ftLastAccessTime.dwLowDateTime=0xede75480, ftLastAccessTime.dwHighDateTime=0x1d5eaf7, ftLastWriteTime.dwLowDateTime=0xede75480, ftLastWriteTime.dwHighDateTime=0x1d5eaf7, nFileSizeHigh=0x0, nFileSizeLow=0x1799e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B-m8zgB-tN.mp3", cAlternateFileName="B-M8ZG~1.MP3")) returned 1 [0117.939] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3acb40, ftCreationTime.dwHighDateTime=0x1d5eafa, ftLastAccessTime.dwLowDateTime=0x1beb3540, ftLastAccessTime.dwHighDateTime=0x1d5e81e, ftLastWriteTime.dwLowDateTime=0x1beb3540, ftLastWriteTime.dwHighDateTime=0x1d5e81e, nFileSizeHigh=0x0, nFileSizeLow=0x11fe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IePDQOLDlXqx16NB.mp3", cAlternateFileName="IEPDQO~1.MP3")) returned 1 [0117.939] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe308bb70, ftCreationTime.dwHighDateTime=0x1d5eed6, ftLastAccessTime.dwLowDateTime=0x44375d40, ftLastAccessTime.dwHighDateTime=0x1d5e214, ftLastWriteTime.dwLowDateTime=0x44375d40, ftLastWriteTime.dwHighDateTime=0x1d5e214, nFileSizeHigh=0x0, nFileSizeLow=0xe80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vkL7Axi Puy73-k5.m4a", cAlternateFileName="VKL7AX~1.M4A")) returned 1 [0117.939] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.939] FindClose (in: hFindFile=0x77dd80 | out: hFindFile=0x77dd80) returned 1 [0117.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0117.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0117.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0117.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI", lpFilePart=0x0) returned 0x23 [0117.940] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12772940, ftCreationTime.dwHighDateTime=0x1d5e78a, ftLastAccessTime.dwLowDateTime=0xa56bfc80, ftLastAccessTime.dwHighDateTime=0x1d5e5fa, ftLastWriteTime.dwLowDateTime=0xa56bfc80, ftLastWriteTime.dwHighDateTime=0x1d5e5fa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e1c0 [0117.940] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12772940, ftCreationTime.dwHighDateTime=0x1d5e78a, ftLastAccessTime.dwLowDateTime=0xa56bfc80, ftLastAccessTime.dwHighDateTime=0x1d5e5fa, ftLastWriteTime.dwLowDateTime=0xa56bfc80, ftLastWriteTime.dwHighDateTime=0x1d5e5fa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.940] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc09ecfc0, ftCreationTime.dwHighDateTime=0x1d5e3a5, ftLastAccessTime.dwLowDateTime=0xede75480, ftLastAccessTime.dwHighDateTime=0x1d5eaf7, ftLastWriteTime.dwLowDateTime=0xede75480, ftLastWriteTime.dwHighDateTime=0x1d5eaf7, nFileSizeHigh=0x0, nFileSizeLow=0x1799e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B-m8zgB-tN.mp3", cAlternateFileName="B-M8ZG~1.MP3")) returned 1 [0117.940] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3acb40, ftCreationTime.dwHighDateTime=0x1d5eafa, ftLastAccessTime.dwLowDateTime=0x1beb3540, ftLastAccessTime.dwHighDateTime=0x1d5e81e, ftLastWriteTime.dwLowDateTime=0x1beb3540, ftLastWriteTime.dwHighDateTime=0x1d5e81e, nFileSizeHigh=0x0, nFileSizeLow=0x11fe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IePDQOLDlXqx16NB.mp3", cAlternateFileName="IEPDQO~1.MP3")) returned 1 [0117.940] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe308bb70, ftCreationTime.dwHighDateTime=0x1d5eed6, ftLastAccessTime.dwLowDateTime=0x44375d40, ftLastAccessTime.dwHighDateTime=0x1d5e214, ftLastWriteTime.dwLowDateTime=0x44375d40, ftLastWriteTime.dwHighDateTime=0x1d5e214, nFileSizeHigh=0x0, nFileSizeLow=0xe80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vkL7Axi Puy73-k5.m4a", cAlternateFileName="VKL7AX~1.M4A")) returned 1 [0117.940] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe308bb70, ftCreationTime.dwHighDateTime=0x1d5eed6, ftLastAccessTime.dwLowDateTime=0x44375d40, ftLastAccessTime.dwHighDateTime=0x1d5e214, ftLastWriteTime.dwLowDateTime=0x44375d40, ftLastWriteTime.dwHighDateTime=0x1d5e214, nFileSizeHigh=0x0, nFileSizeLow=0xe80, dwReserved0=0x0, dwReserved1=0x0, cFileName="vkL7Axi Puy73-k5.m4a", cAlternateFileName="VKL7AX~1.M4A")) returned 0 [0117.941] FindClose (in: hFindFile=0x77e1c0 | out: hFindFile=0x77e1c0) returned 1 [0117.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0117.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0117.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3", lpFilePart=0x0) returned 0x32 [0117.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0117.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3" (normalized: "c:\\users\\fd1hvy\\music\\i6ukkqqo3s-oi\\b-m8zgb-tn.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.941] GetFileType (hFile=0x404) returned 0x1 [0117.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0117.941] GetFileType (hFile=0x404) returned 0x1 [0117.941] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x1799e [0117.942] ReadFile (in: hFile=0x404, lpBuffer=0x3457760, nNumberOfBytesToRead=0x1799e, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x3457760*, lpNumberOfBytesRead=0x4fe778*=0x1799e, lpOverlapped=0x0) returned 1 [0117.945] CloseHandle (hObject=0x404) returned 1 [0117.979] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0117.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0117.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0117.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0117.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3", lpFilePart=0x0) returned 0x32 [0117.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0117.980] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3" (normalized: "c:\\users\\fd1hvy\\music\\i6ukkqqo3s-oi\\b-m8zgb-tn.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.982] GetFileType (hFile=0x404) returned 0x1 [0117.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0117.982] GetFileType (hFile=0x404) returned 0x1 [0117.982] WriteFile (in: hFile=0x404, lpBuffer=0x34cd7c0*, nNumberOfBytesToWrite=0x179a0, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x34cd7c0*, lpNumberOfBytesWritten=0x4fe76c*=0x179a0, lpOverlapped=0x0) returned 1 [0117.985] CloseHandle (hObject=0x404) returned 1 [0117.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3", lpFilePart=0x0) returned 0x32 [0117.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3.klavins", lpFilePart=0x0) returned 0x3a [0117.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0117.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3" (normalized: "c:\\users\\fd1hvy\\music\\i6ukkqqo3s-oi\\b-m8zgb-tn.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc09ecfc0, ftCreationTime.dwHighDateTime=0x1d5e3a5, ftLastAccessTime.dwLowDateTime=0xede75480, ftLastAccessTime.dwHighDateTime=0x1d5eaf7, ftLastWriteTime.dwLowDateTime=0x886ae0c8, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x179a0)) returned 1 [0117.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0117.994] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3" (normalized: "c:\\users\\fd1hvy\\music\\i6ukkqqo3s-oi\\b-m8zgb-tn.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\B-m8zgB-tN.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\music\\i6ukkqqo3s-oi\\b-m8zgb-tn.mp3.klavins")) returned 1 [0117.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3", lpFilePart=0x0) returned 0x38 [0117.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0117.995] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3" (normalized: "c:\\users\\fd1hvy\\music\\i6ukkqqo3s-oi\\iepdqoldlxqx16nb.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0117.995] GetFileType (hFile=0x404) returned 0x1 [0117.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0117.995] GetFileType (hFile=0x404) returned 0x1 [0117.995] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x11fe0 [0117.995] ReadFile (in: hFile=0x404, lpBuffer=0x24e82fc, nNumberOfBytesToRead=0x11fe0, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x24e82fc*, lpNumberOfBytesRead=0x4fe778*=0x11fe0, lpOverlapped=0x0) returned 1 [0117.997] CloseHandle (hObject=0x404) returned 1 [0118.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0118.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0118.020] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3", lpFilePart=0x0) returned 0x38 [0118.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0118.020] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3" (normalized: "c:\\users\\fd1hvy\\music\\i6ukkqqo3s-oi\\iepdqoldlxqx16nb.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.021] GetFileType (hFile=0x404) returned 0x1 [0118.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0118.021] GetFileType (hFile=0x404) returned 0x1 [0118.021] WriteFile (in: hFile=0x404, lpBuffer=0x256b0c8*, nNumberOfBytesToWrite=0x11ff0, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x256b0c8*, lpNumberOfBytesWritten=0x4fe76c*=0x11ff0, lpOverlapped=0x0) returned 1 [0118.023] CloseHandle (hObject=0x404) returned 1 [0118.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3", lpFilePart=0x0) returned 0x38 [0118.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3.klavins", lpFilePart=0x0) returned 0x40 [0118.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0118.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3" (normalized: "c:\\users\\fd1hvy\\music\\i6ukkqqo3s-oi\\iepdqoldlxqx16nb.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3acb40, ftCreationTime.dwHighDateTime=0x1d5eafa, ftLastAccessTime.dwLowDateTime=0x1beb3540, ftLastAccessTime.dwHighDateTime=0x1d5e81e, ftLastWriteTime.dwLowDateTime=0x886fa48c, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x11ff0)) returned 1 [0118.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0118.028] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3" (normalized: "c:\\users\\fd1hvy\\music\\i6ukkqqo3s-oi\\iepdqoldlxqx16nb.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\I6ukkqQO3s-oI\\IePDQOLDlXqx16NB.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\music\\i6ukkqqo3s-oi\\iepdqoldlxqx16nb.mp3.klavins")) returned 1 [0118.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0118.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv", lpFilePart=0x0) returned 0x1b [0118.029] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe25ddd30, ftCreationTime.dwHighDateTime=0x1d5e7ca, ftLastAccessTime.dwLowDateTime=0x71802150, ftLastAccessTime.dwHighDateTime=0x1d5ea30, ftLastWriteTime.dwLowDateTime=0x71802150, ftLastWriteTime.dwHighDateTime=0x1d5ea30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e140 [0118.030] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe25ddd30, ftCreationTime.dwHighDateTime=0x1d5e7ca, ftLastAccessTime.dwLowDateTime=0x71802150, ftLastAccessTime.dwHighDateTime=0x1d5ea30, ftLastWriteTime.dwLowDateTime=0x71802150, ftLastWriteTime.dwHighDateTime=0x1d5ea30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.030] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f8534f0, ftCreationTime.dwHighDateTime=0x1d5eb8c, ftLastAccessTime.dwLowDateTime=0x95857d0, ftLastAccessTime.dwHighDateTime=0x1d5e285, ftLastWriteTime.dwLowDateTime=0x95857d0, ftLastWriteTime.dwHighDateTime=0x1d5e285, nFileSizeHigh=0x0, nFileSizeLow=0x289d, dwReserved0=0x0, dwReserved1=0x0, cFileName="C7VGcDJzh4f.m4a", cAlternateFileName="C7VGCD~1.M4A")) returned 1 [0118.030] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x793da830, ftCreationTime.dwHighDateTime=0x1d5ebcb, ftLastAccessTime.dwLowDateTime=0xc670b080, ftLastAccessTime.dwHighDateTime=0x1d5e4c2, ftLastWriteTime.dwLowDateTime=0xc670b080, ftLastWriteTime.dwHighDateTime=0x1d5e4c2, nFileSizeHigh=0x0, nFileSizeLow=0xffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JnANm.m4a", cAlternateFileName="")) returned 1 [0118.030] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9788bf0, ftCreationTime.dwHighDateTime=0x1d5e30b, ftLastAccessTime.dwLowDateTime=0x19d0d910, ftLastAccessTime.dwHighDateTime=0x1d5f0d7, ftLastWriteTime.dwLowDateTime=0x19d0d910, ftLastWriteTime.dwHighDateTime=0x1d5f0d7, nFileSizeHigh=0x0, nFileSizeLow=0xd3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="LrEko-rz5Xy3kZXtO.wav", cAlternateFileName="LREKO-~1.WAV")) returned 1 [0118.030] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde1e1490, ftCreationTime.dwHighDateTime=0x1d5efb5, ftLastAccessTime.dwLowDateTime=0x4569ad40, ftLastAccessTime.dwHighDateTime=0x1d5e91b, ftLastWriteTime.dwLowDateTime=0x4569ad40, ftLastWriteTime.dwHighDateTime=0x1d5e91b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTtzwEjTf44G4cOL-.mp3", cAlternateFileName="OTTZWE~1.MP3")) returned 1 [0118.030] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76ce3c0, ftCreationTime.dwHighDateTime=0x1d5e314, ftLastAccessTime.dwLowDateTime=0x6e77bac0, ftLastAccessTime.dwHighDateTime=0x1d5eefb, ftLastWriteTime.dwLowDateTime=0x6e77bac0, ftLastWriteTime.dwHighDateTime=0x1d5eefb, nFileSizeHigh=0x0, nFileSizeLow=0x115d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="v6izgGjRNal8r.mp3", cAlternateFileName="V6IZGG~1.MP3")) returned 1 [0118.031] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc58370, ftCreationTime.dwHighDateTime=0x1d5ee03, ftLastAccessTime.dwLowDateTime=0x833587f0, ftLastAccessTime.dwHighDateTime=0x1d5e0df, ftLastWriteTime.dwLowDateTime=0x833587f0, ftLastWriteTime.dwHighDateTime=0x1d5e0df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_0yROMHaywmWB62", cAlternateFileName="_0YROM~1")) returned 1 [0118.031] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc58370, ftCreationTime.dwHighDateTime=0x1d5ee03, ftLastAccessTime.dwLowDateTime=0x833587f0, ftLastAccessTime.dwHighDateTime=0x1d5e0df, ftLastWriteTime.dwLowDateTime=0x833587f0, ftLastWriteTime.dwHighDateTime=0x1d5e0df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_0yROMHaywmWB62", cAlternateFileName="_0YROM~1")) returned 0 [0118.031] FindClose (in: hFindFile=0x77e140 | out: hFindFile=0x77e140) returned 1 [0118.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0118.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0118.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0118.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv", lpFilePart=0x0) returned 0x1b [0118.031] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe25ddd30, ftCreationTime.dwHighDateTime=0x1d5e7ca, ftLastAccessTime.dwLowDateTime=0x71802150, ftLastAccessTime.dwHighDateTime=0x1d5ea30, ftLastWriteTime.dwLowDateTime=0x71802150, ftLastWriteTime.dwHighDateTime=0x1d5ea30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e140 [0118.032] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe25ddd30, ftCreationTime.dwHighDateTime=0x1d5e7ca, ftLastAccessTime.dwLowDateTime=0x71802150, ftLastAccessTime.dwHighDateTime=0x1d5ea30, ftLastWriteTime.dwLowDateTime=0x71802150, ftLastWriteTime.dwHighDateTime=0x1d5ea30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.032] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f8534f0, ftCreationTime.dwHighDateTime=0x1d5eb8c, ftLastAccessTime.dwLowDateTime=0x95857d0, ftLastAccessTime.dwHighDateTime=0x1d5e285, ftLastWriteTime.dwLowDateTime=0x95857d0, ftLastWriteTime.dwHighDateTime=0x1d5e285, nFileSizeHigh=0x0, nFileSizeLow=0x289d, dwReserved0=0x0, dwReserved1=0x0, cFileName="C7VGcDJzh4f.m4a", cAlternateFileName="C7VGCD~1.M4A")) returned 1 [0118.032] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x793da830, ftCreationTime.dwHighDateTime=0x1d5ebcb, ftLastAccessTime.dwLowDateTime=0xc670b080, ftLastAccessTime.dwHighDateTime=0x1d5e4c2, ftLastWriteTime.dwLowDateTime=0xc670b080, ftLastWriteTime.dwHighDateTime=0x1d5e4c2, nFileSizeHigh=0x0, nFileSizeLow=0xffb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JnANm.m4a", cAlternateFileName="")) returned 1 [0118.032] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9788bf0, ftCreationTime.dwHighDateTime=0x1d5e30b, ftLastAccessTime.dwLowDateTime=0x19d0d910, ftLastAccessTime.dwHighDateTime=0x1d5f0d7, ftLastWriteTime.dwLowDateTime=0x19d0d910, ftLastWriteTime.dwHighDateTime=0x1d5f0d7, nFileSizeHigh=0x0, nFileSizeLow=0xd3a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="LrEko-rz5Xy3kZXtO.wav", cAlternateFileName="LREKO-~1.WAV")) returned 1 [0118.032] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde1e1490, ftCreationTime.dwHighDateTime=0x1d5efb5, ftLastAccessTime.dwLowDateTime=0x4569ad40, ftLastAccessTime.dwHighDateTime=0x1d5e91b, ftLastWriteTime.dwLowDateTime=0x4569ad40, ftLastWriteTime.dwHighDateTime=0x1d5e91b, nFileSizeHigh=0x0, nFileSizeLow=0x10689, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTtzwEjTf44G4cOL-.mp3", cAlternateFileName="OTTZWE~1.MP3")) returned 1 [0118.032] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76ce3c0, ftCreationTime.dwHighDateTime=0x1d5e314, ftLastAccessTime.dwLowDateTime=0x6e77bac0, ftLastAccessTime.dwHighDateTime=0x1d5eefb, ftLastWriteTime.dwLowDateTime=0x6e77bac0, ftLastWriteTime.dwHighDateTime=0x1d5eefb, nFileSizeHigh=0x0, nFileSizeLow=0x115d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="v6izgGjRNal8r.mp3", cAlternateFileName="V6IZGG~1.MP3")) returned 1 [0118.033] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc58370, ftCreationTime.dwHighDateTime=0x1d5ee03, ftLastAccessTime.dwLowDateTime=0x833587f0, ftLastAccessTime.dwHighDateTime=0x1d5e0df, ftLastWriteTime.dwLowDateTime=0x833587f0, ftLastWriteTime.dwHighDateTime=0x1d5e0df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_0yROMHaywmWB62", cAlternateFileName="_0YROM~1")) returned 1 [0118.033] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.033] FindClose (in: hFindFile=0x77e140 | out: hFindFile=0x77e140) returned 1 [0118.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0118.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0118.033] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3", lpFilePart=0x0) returned 0x31 [0118.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0118.033] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\ottzwejtf44g4col-.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.033] GetFileType (hFile=0x404) returned 0x1 [0118.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0118.034] GetFileType (hFile=0x404) returned 0x1 [0118.034] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x10689 [0118.034] ReadFile (in: hFile=0x404, lpBuffer=0x257f134, nNumberOfBytesToRead=0x10689, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x257f134*, lpNumberOfBytesRead=0x4fe778*=0x10689, lpOverlapped=0x0) returned 1 [0118.035] CloseHandle (hObject=0x404) returned 1 [0118.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0118.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0118.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3", lpFilePart=0x0) returned 0x31 [0118.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0118.101] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\ottzwejtf44g4col-.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.102] GetFileType (hFile=0x404) returned 0x1 [0118.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0118.103] GetFileType (hFile=0x404) returned 0x1 [0118.103] WriteFile (in: hFile=0x404, lpBuffer=0x240e35c*, nNumberOfBytesToWrite=0x10690, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x240e35c*, lpNumberOfBytesWritten=0x4fe76c*=0x10690, lpOverlapped=0x0) returned 1 [0118.104] CloseHandle (hObject=0x404) returned 1 [0118.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3", lpFilePart=0x0) returned 0x31 [0118.107] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3.klavins", lpFilePart=0x0) returned 0x39 [0118.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0118.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\ottzwejtf44g4col-.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde1e1490, ftCreationTime.dwHighDateTime=0x1d5efb5, ftLastAccessTime.dwLowDateTime=0x4569ad40, ftLastAccessTime.dwHighDateTime=0x1d5e91b, ftLastWriteTime.dwLowDateTime=0x887b9294, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10690)) returned 1 [0118.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0118.107] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\ottzwejtf44g4col-.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\OTtzwEjTf44G4cOL-.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\ottzwejtf44g4col-.mp3.klavins")) returned 1 [0118.108] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3", lpFilePart=0x0) returned 0x2d [0118.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0118.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\v6izggjrnal8r.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.108] GetFileType (hFile=0x404) returned 0x1 [0118.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0118.108] GetFileType (hFile=0x404) returned 0x1 [0118.108] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x115d8 [0118.108] ReadFile (in: hFile=0x404, lpBuffer=0x241ee9c, nNumberOfBytesToRead=0x115d8, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x241ee9c*, lpNumberOfBytesRead=0x4fe778*=0x115d8, lpOverlapped=0x0) returned 1 [0118.111] CloseHandle (hObject=0x404) returned 1 [0118.146] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0118.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0118.146] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3", lpFilePart=0x0) returned 0x2d [0118.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0118.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\v6izggjrnal8r.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.148] GetFileType (hFile=0x404) returned 0x1 [0118.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0118.148] GetFileType (hFile=0x404) returned 0x1 [0118.148] WriteFile (in: hFile=0x404, lpBuffer=0x249ff94*, nNumberOfBytesToWrite=0x115e0, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x249ff94*, lpNumberOfBytesWritten=0x4fe76c*=0x115e0, lpOverlapped=0x0) returned 1 [0118.150] CloseHandle (hObject=0x404) returned 1 [0118.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3", lpFilePart=0x0) returned 0x2d [0118.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3.klavins", lpFilePart=0x0) returned 0x35 [0118.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0118.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\v6izggjrnal8r.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76ce3c0, ftCreationTime.dwHighDateTime=0x1d5e314, ftLastAccessTime.dwLowDateTime=0x6e77bac0, ftLastAccessTime.dwHighDateTime=0x1d5eefb, ftLastWriteTime.dwLowDateTime=0x8882b64b, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x115e0)) returned 1 [0118.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0118.152] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\v6izggjrnal8r.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\v6izgGjRNal8r.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\v6izggjrnal8r.mp3.klavins")) returned 1 [0118.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b0) returned 1 [0118.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62", nBufferLength=0x105, lpBuffer=0x4fe264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62", lpFilePart=0x0) returned 0x2b [0118.153] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\*", lpFindFileData=0x4fe4d8 | out: lpFindFileData=0x4fe4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc58370, ftCreationTime.dwHighDateTime=0x1d5ee03, ftLastAccessTime.dwLowDateTime=0x833587f0, ftLastAccessTime.dwHighDateTime=0x1d5e0df, ftLastWriteTime.dwLowDateTime=0x833587f0, ftLastWriteTime.dwHighDateTime=0x1d5e0df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dc40 [0118.154] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc58370, ftCreationTime.dwHighDateTime=0x1d5ee03, ftLastAccessTime.dwLowDateTime=0x833587f0, ftLastAccessTime.dwHighDateTime=0x1d5e0df, ftLastWriteTime.dwLowDateTime=0x833587f0, ftLastWriteTime.dwHighDateTime=0x1d5e0df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.154] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7235400, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x11f52350, ftLastAccessTime.dwHighDateTime=0x1d5e8cf, ftLastWriteTime.dwLowDateTime=0x11f52350, ftLastWriteTime.dwHighDateTime=0x1d5e8cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2edgGAsRaR", cAlternateFileName="2EDGGA~1")) returned 1 [0118.154] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed72b3c0, ftCreationTime.dwHighDateTime=0x1d5eb86, ftLastAccessTime.dwLowDateTime=0xb9249040, ftLastAccessTime.dwHighDateTime=0x1d5ee3b, ftLastWriteTime.dwLowDateTime=0xb9249040, ftLastWriteTime.dwHighDateTime=0x1d5ee3b, nFileSizeHigh=0x0, nFileSizeLow=0x1501a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl9zuWkT.m4a", cAlternateFileName="")) returned 1 [0118.154] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7ea440, ftCreationTime.dwHighDateTime=0x1d5e611, ftLastAccessTime.dwLowDateTime=0x37b17620, ftLastAccessTime.dwHighDateTime=0x1d5e9bf, ftLastWriteTime.dwLowDateTime=0x37b17620, ftLastWriteTime.dwHighDateTime=0x1d5e9bf, nFileSizeHigh=0x0, nFileSizeLow=0x1532b, dwReserved0=0x0, dwReserved1=0x0, cFileName="cvzkiyXv.m4a", cAlternateFileName="")) returned 1 [0118.154] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8acf58e0, ftCreationTime.dwHighDateTime=0x1d5e8ca, ftLastAccessTime.dwLowDateTime=0xfee7a280, ftLastAccessTime.dwHighDateTime=0x1d5eb97, ftLastWriteTime.dwLowDateTime=0xfee7a280, ftLastWriteTime.dwHighDateTime=0x1d5eb97, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeV3lRvFrdEoiaqF", cAlternateFileName="FEV3LR~1")) returned 1 [0118.154] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec0e4c0, ftCreationTime.dwHighDateTime=0x1d5ed18, ftLastAccessTime.dwLowDateTime=0xe5a292c0, ftLastAccessTime.dwHighDateTime=0x1d5efdf, ftLastWriteTime.dwLowDateTime=0xe5a292c0, ftLastWriteTime.dwHighDateTime=0x1d5efdf, nFileSizeHigh=0x0, nFileSizeLow=0x4cc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JtAM-IeI5zVHJ8JcaEy.mp3", cAlternateFileName="JTAM-I~1.MP3")) returned 1 [0118.155] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e6172f0, ftCreationTime.dwHighDateTime=0x1d5e0ab, ftLastAccessTime.dwLowDateTime=0x60f9b680, ftLastAccessTime.dwHighDateTime=0x1d5ebba, ftLastWriteTime.dwLowDateTime=0x60f9b680, ftLastWriteTime.dwHighDateTime=0x1d5ebba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kieyJ5AS1a", cAlternateFileName="KIEYJ5~1")) returned 1 [0118.155] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x373c6170, ftCreationTime.dwHighDateTime=0x1d5e733, ftLastAccessTime.dwLowDateTime=0x85e2a720, ftLastAccessTime.dwHighDateTime=0x1d5e8a1, ftLastWriteTime.dwLowDateTime=0x85e2a720, ftLastWriteTime.dwHighDateTime=0x1d5e8a1, nFileSizeHigh=0x0, nFileSizeLow=0x5dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="kRuh-g-d3hIX5oC.m4a", cAlternateFileName="KRUH-G~1.M4A")) returned 1 [0118.155] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd64948b0, ftCreationTime.dwHighDateTime=0x1d5e183, ftLastAccessTime.dwLowDateTime=0x89aba040, ftLastAccessTime.dwHighDateTime=0x1d5e794, ftLastWriteTime.dwLowDateTime=0x89aba040, ftLastWriteTime.dwHighDateTime=0x1d5e794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pezVtXsxWzeTU", cAlternateFileName="PEZVTX~1")) returned 1 [0118.155] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61ec150, ftCreationTime.dwHighDateTime=0x1d5e80f, ftLastAccessTime.dwLowDateTime=0x24e213d0, ftLastAccessTime.dwHighDateTime=0x1d5e927, ftLastWriteTime.dwLowDateTime=0x24e213d0, ftLastWriteTime.dwHighDateTime=0x1d5e927, nFileSizeHigh=0x0, nFileSizeLow=0xd223, dwReserved0=0x0, dwReserved1=0x0, cFileName="tbgbl4v 9IqEbXRCK.wav", cAlternateFileName="TBGBL4~1.WAV")) returned 1 [0118.155] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.155] FindClose (in: hFindFile=0x77dc40 | out: hFindFile=0x77dc40) returned 1 [0118.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe76c) returned 1 [0118.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe778) returned 1 [0118.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b0) returned 1 [0118.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62", nBufferLength=0x105, lpBuffer=0x4fe264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62", lpFilePart=0x0) returned 0x2b [0118.156] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\*", lpFindFileData=0x4fe4d8 | out: lpFindFileData=0x4fe4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc58370, ftCreationTime.dwHighDateTime=0x1d5ee03, ftLastAccessTime.dwLowDateTime=0x833587f0, ftLastAccessTime.dwHighDateTime=0x1d5e0df, ftLastWriteTime.dwLowDateTime=0x833587f0, ftLastWriteTime.dwHighDateTime=0x1d5e0df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dc40 [0118.156] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc58370, ftCreationTime.dwHighDateTime=0x1d5ee03, ftLastAccessTime.dwLowDateTime=0x833587f0, ftLastAccessTime.dwHighDateTime=0x1d5e0df, ftLastWriteTime.dwLowDateTime=0x833587f0, ftLastWriteTime.dwHighDateTime=0x1d5e0df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.156] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7235400, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x11f52350, ftLastAccessTime.dwHighDateTime=0x1d5e8cf, ftLastWriteTime.dwLowDateTime=0x11f52350, ftLastWriteTime.dwHighDateTime=0x1d5e8cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2edgGAsRaR", cAlternateFileName="2EDGGA~1")) returned 1 [0118.156] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed72b3c0, ftCreationTime.dwHighDateTime=0x1d5eb86, ftLastAccessTime.dwLowDateTime=0xb9249040, ftLastAccessTime.dwHighDateTime=0x1d5ee3b, ftLastWriteTime.dwLowDateTime=0xb9249040, ftLastWriteTime.dwHighDateTime=0x1d5ee3b, nFileSizeHigh=0x0, nFileSizeLow=0x1501a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl9zuWkT.m4a", cAlternateFileName="")) returned 1 [0118.156] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7ea440, ftCreationTime.dwHighDateTime=0x1d5e611, ftLastAccessTime.dwLowDateTime=0x37b17620, ftLastAccessTime.dwHighDateTime=0x1d5e9bf, ftLastWriteTime.dwLowDateTime=0x37b17620, ftLastWriteTime.dwHighDateTime=0x1d5e9bf, nFileSizeHigh=0x0, nFileSizeLow=0x1532b, dwReserved0=0x0, dwReserved1=0x0, cFileName="cvzkiyXv.m4a", cAlternateFileName="")) returned 1 [0118.157] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8acf58e0, ftCreationTime.dwHighDateTime=0x1d5e8ca, ftLastAccessTime.dwLowDateTime=0xfee7a280, ftLastAccessTime.dwHighDateTime=0x1d5eb97, ftLastWriteTime.dwLowDateTime=0xfee7a280, ftLastWriteTime.dwHighDateTime=0x1d5eb97, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeV3lRvFrdEoiaqF", cAlternateFileName="FEV3LR~1")) returned 1 [0118.157] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec0e4c0, ftCreationTime.dwHighDateTime=0x1d5ed18, ftLastAccessTime.dwLowDateTime=0xe5a292c0, ftLastAccessTime.dwHighDateTime=0x1d5efdf, ftLastWriteTime.dwLowDateTime=0xe5a292c0, ftLastWriteTime.dwHighDateTime=0x1d5efdf, nFileSizeHigh=0x0, nFileSizeLow=0x4cc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="JtAM-IeI5zVHJ8JcaEy.mp3", cAlternateFileName="JTAM-I~1.MP3")) returned 1 [0118.157] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e6172f0, ftCreationTime.dwHighDateTime=0x1d5e0ab, ftLastAccessTime.dwLowDateTime=0x60f9b680, ftLastAccessTime.dwHighDateTime=0x1d5ebba, ftLastWriteTime.dwLowDateTime=0x60f9b680, ftLastWriteTime.dwHighDateTime=0x1d5ebba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kieyJ5AS1a", cAlternateFileName="KIEYJ5~1")) returned 1 [0118.157] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x373c6170, ftCreationTime.dwHighDateTime=0x1d5e733, ftLastAccessTime.dwLowDateTime=0x85e2a720, ftLastAccessTime.dwHighDateTime=0x1d5e8a1, ftLastWriteTime.dwLowDateTime=0x85e2a720, ftLastWriteTime.dwHighDateTime=0x1d5e8a1, nFileSizeHigh=0x0, nFileSizeLow=0x5dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="kRuh-g-d3hIX5oC.m4a", cAlternateFileName="KRUH-G~1.M4A")) returned 1 [0118.157] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd64948b0, ftCreationTime.dwHighDateTime=0x1d5e183, ftLastAccessTime.dwLowDateTime=0x89aba040, ftLastAccessTime.dwHighDateTime=0x1d5e794, ftLastWriteTime.dwLowDateTime=0x89aba040, ftLastWriteTime.dwHighDateTime=0x1d5e794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pezVtXsxWzeTU", cAlternateFileName="PEZVTX~1")) returned 1 [0118.157] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61ec150, ftCreationTime.dwHighDateTime=0x1d5e80f, ftLastAccessTime.dwLowDateTime=0x24e213d0, ftLastAccessTime.dwHighDateTime=0x1d5e927, ftLastWriteTime.dwLowDateTime=0x24e213d0, ftLastWriteTime.dwHighDateTime=0x1d5e927, nFileSizeHigh=0x0, nFileSizeLow=0xd223, dwReserved0=0x0, dwReserved1=0x0, cFileName="tbgbl4v 9IqEbXRCK.wav", cAlternateFileName="TBGBL4~1.WAV")) returned 1 [0118.157] FindNextFileW (in: hFindFile=0x77dc40, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61ec150, ftCreationTime.dwHighDateTime=0x1d5e80f, ftLastAccessTime.dwLowDateTime=0x24e213d0, ftLastAccessTime.dwHighDateTime=0x1d5e927, ftLastWriteTime.dwLowDateTime=0x24e213d0, ftLastWriteTime.dwHighDateTime=0x1d5e927, nFileSizeHigh=0x0, nFileSizeLow=0xd223, dwReserved0=0x0, dwReserved1=0x0, cFileName="tbgbl4v 9IqEbXRCK.wav", cAlternateFileName="TBGBL4~1.WAV")) returned 0 [0118.158] FindClose (in: hFindFile=0x77dc40 | out: hFindFile=0x77dc40) returned 1 [0118.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe76c) returned 1 [0118.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe778) returned 1 [0118.158] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3", lpFilePart=0x0) returned 0x43 [0118.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0118.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\jtam-iei5zvhj8jcaey.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.158] GetFileType (hFile=0x404) returned 0x1 [0118.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0118.158] GetFileType (hFile=0x404) returned 0x1 [0118.158] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x4cc3 [0118.158] ReadFile (in: hFile=0x404, lpBuffer=0x24b441c, nNumberOfBytesToRead=0x4cc3, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x24b441c*, lpNumberOfBytesRead=0x4fe704*=0x4cc3, lpOverlapped=0x0) returned 1 [0118.159] CloseHandle (hObject=0x404) returned 1 [0118.176] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0118.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0118.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3", lpFilePart=0x0) returned 0x43 [0118.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0118.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\jtam-iei5zvhj8jcaey.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.178] GetFileType (hFile=0x404) returned 0x1 [0118.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0118.178] GetFileType (hFile=0x404) returned 0x1 [0118.178] WriteFile (in: hFile=0x404, lpBuffer=0x2519218*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x2519218*, lpNumberOfBytesWritten=0x4fe6f8*=0x4cd0, lpOverlapped=0x0) returned 1 [0118.179] CloseHandle (hObject=0x404) returned 1 [0118.192] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3", lpFilePart=0x0) returned 0x43 [0118.192] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3.klavins", lpFilePart=0x0) returned 0x4b [0118.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0118.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\jtam-iei5zvhj8jcaey.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec0e4c0, ftCreationTime.dwHighDateTime=0x1d5ed18, ftLastAccessTime.dwLowDateTime=0xe5a292c0, ftLastAccessTime.dwHighDateTime=0x1d5efdf, ftLastWriteTime.dwLowDateTime=0x888a9929, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x4cd0)) returned 1 [0118.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0118.192] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\jtam-iei5zvhj8jcaey.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\JtAM-IeI5zVHJ8JcaEy.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\jtam-iei5zvhj8jcaey.mp3.klavins")) returned 1 [0118.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0118.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\2edgGAsRaR", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\2edgGAsRaR", lpFilePart=0x0) returned 0x36 [0118.193] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\2edgGAsRaR\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7235400, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x11f52350, ftLastAccessTime.dwHighDateTime=0x1d5e8cf, ftLastWriteTime.dwLowDateTime=0x11f52350, ftLastWriteTime.dwHighDateTime=0x1d5e8cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dcc0 [0118.194] FindNextFileW (in: hFindFile=0x77dcc0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7235400, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x11f52350, ftLastAccessTime.dwHighDateTime=0x1d5e8cf, ftLastWriteTime.dwLowDateTime=0x11f52350, ftLastWriteTime.dwHighDateTime=0x1d5e8cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.194] FindNextFileW (in: hFindFile=0x77dcc0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7235400, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x11f52350, ftLastAccessTime.dwHighDateTime=0x1d5e8cf, ftLastWriteTime.dwLowDateTime=0x11f52350, ftLastWriteTime.dwHighDateTime=0x1d5e8cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0118.194] FindClose (in: hFindFile=0x77dcc0 | out: hFindFile=0x77dcc0) returned 1 [0118.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0118.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0118.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0118.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\2edgGAsRaR", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\2edgGAsRaR", lpFilePart=0x0) returned 0x36 [0118.194] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\2edgGAsRaR\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7235400, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x11f52350, ftLastAccessTime.dwHighDateTime=0x1d5e8cf, ftLastWriteTime.dwLowDateTime=0x11f52350, ftLastWriteTime.dwHighDateTime=0x1d5e8cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e180 [0118.195] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7235400, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x11f52350, ftLastAccessTime.dwHighDateTime=0x1d5e8cf, ftLastWriteTime.dwLowDateTime=0x11f52350, ftLastWriteTime.dwHighDateTime=0x1d5e8cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.195] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb7235400, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x11f52350, ftLastAccessTime.dwHighDateTime=0x1d5e8cf, ftLastWriteTime.dwLowDateTime=0x11f52350, ftLastWriteTime.dwHighDateTime=0x1d5e8cf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0118.195] FindClose (in: hFindFile=0x77e180 | out: hFindFile=0x77e180) returned 1 [0118.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0118.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0118.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0118.195] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\FeV3lRvFrdEoiaqF", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\FeV3lRvFrdEoiaqF", lpFilePart=0x0) returned 0x3c [0118.195] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\FeV3lRvFrdEoiaqF\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8acf58e0, ftCreationTime.dwHighDateTime=0x1d5e8ca, ftLastAccessTime.dwLowDateTime=0xfee7a280, ftLastAccessTime.dwHighDateTime=0x1d5eb97, ftLastWriteTime.dwLowDateTime=0xfee7a280, ftLastWriteTime.dwHighDateTime=0x1d5eb97, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dcc0 [0118.195] FindNextFileW (in: hFindFile=0x77dcc0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8acf58e0, ftCreationTime.dwHighDateTime=0x1d5e8ca, ftLastAccessTime.dwLowDateTime=0xfee7a280, ftLastAccessTime.dwHighDateTime=0x1d5eb97, ftLastWriteTime.dwLowDateTime=0xfee7a280, ftLastWriteTime.dwHighDateTime=0x1d5eb97, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.196] FindNextFileW (in: hFindFile=0x77dcc0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d89b90, ftCreationTime.dwHighDateTime=0x1d5e6f9, ftLastAccessTime.dwLowDateTime=0x88564570, ftLastAccessTime.dwHighDateTime=0x1d5e54f, ftLastWriteTime.dwLowDateTime=0x88564570, ftLastWriteTime.dwHighDateTime=0x1d5e54f, nFileSizeHigh=0x0, nFileSizeLow=0x81ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="14-ib.m4a", cAlternateFileName="")) returned 1 [0118.196] FindNextFileW (in: hFindFile=0x77dcc0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf1e790, ftCreationTime.dwHighDateTime=0x1d5e607, ftLastAccessTime.dwLowDateTime=0xc9b4cf40, ftLastAccessTime.dwHighDateTime=0x1d5ee97, ftLastWriteTime.dwLowDateTime=0xc9b4cf40, ftLastWriteTime.dwHighDateTime=0x1d5ee97, nFileSizeHigh=0x0, nFileSizeLow=0x11933, dwReserved0=0x0, dwReserved1=0x0, cFileName="kKdpi8lFuNPjOD9CVF.m4a", cAlternateFileName="KKDPI8~1.M4A")) returned 1 [0118.196] FindNextFileW (in: hFindFile=0x77dcc0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.196] FindClose (in: hFindFile=0x77dcc0 | out: hFindFile=0x77dcc0) returned 1 [0118.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0118.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0118.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0118.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\FeV3lRvFrdEoiaqF", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\FeV3lRvFrdEoiaqF", lpFilePart=0x0) returned 0x3c [0118.196] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\FeV3lRvFrdEoiaqF\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8acf58e0, ftCreationTime.dwHighDateTime=0x1d5e8ca, ftLastAccessTime.dwLowDateTime=0xfee7a280, ftLastAccessTime.dwHighDateTime=0x1d5eb97, ftLastWriteTime.dwLowDateTime=0xfee7a280, ftLastWriteTime.dwHighDateTime=0x1d5eb97, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e1c0 [0118.196] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8acf58e0, ftCreationTime.dwHighDateTime=0x1d5e8ca, ftLastAccessTime.dwLowDateTime=0xfee7a280, ftLastAccessTime.dwHighDateTime=0x1d5eb97, ftLastWriteTime.dwLowDateTime=0xfee7a280, ftLastWriteTime.dwHighDateTime=0x1d5eb97, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.197] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d89b90, ftCreationTime.dwHighDateTime=0x1d5e6f9, ftLastAccessTime.dwLowDateTime=0x88564570, ftLastAccessTime.dwHighDateTime=0x1d5e54f, ftLastWriteTime.dwLowDateTime=0x88564570, ftLastWriteTime.dwHighDateTime=0x1d5e54f, nFileSizeHigh=0x0, nFileSizeLow=0x81ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="14-ib.m4a", cAlternateFileName="")) returned 1 [0118.197] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf1e790, ftCreationTime.dwHighDateTime=0x1d5e607, ftLastAccessTime.dwLowDateTime=0xc9b4cf40, ftLastAccessTime.dwHighDateTime=0x1d5ee97, ftLastWriteTime.dwLowDateTime=0xc9b4cf40, ftLastWriteTime.dwHighDateTime=0x1d5ee97, nFileSizeHigh=0x0, nFileSizeLow=0x11933, dwReserved0=0x0, dwReserved1=0x0, cFileName="kKdpi8lFuNPjOD9CVF.m4a", cAlternateFileName="KKDPI8~1.M4A")) returned 1 [0118.197] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf1e790, ftCreationTime.dwHighDateTime=0x1d5e607, ftLastAccessTime.dwLowDateTime=0xc9b4cf40, ftLastAccessTime.dwHighDateTime=0x1d5ee97, ftLastWriteTime.dwLowDateTime=0xc9b4cf40, ftLastWriteTime.dwHighDateTime=0x1d5ee97, nFileSizeHigh=0x0, nFileSizeLow=0x11933, dwReserved0=0x0, dwReserved1=0x0, cFileName="kKdpi8lFuNPjOD9CVF.m4a", cAlternateFileName="KKDPI8~1.M4A")) returned 0 [0118.197] FindClose (in: hFindFile=0x77e1c0 | out: hFindFile=0x77e1c0) returned 1 [0118.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0118.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0118.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0118.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a", lpFilePart=0x0) returned 0x36 [0118.197] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e6172f0, ftCreationTime.dwHighDateTime=0x1d5e0ab, ftLastAccessTime.dwLowDateTime=0x60f9b680, ftLastAccessTime.dwHighDateTime=0x1d5ebba, ftLastWriteTime.dwLowDateTime=0x60f9b680, ftLastWriteTime.dwHighDateTime=0x1d5ebba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e180 [0118.198] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e6172f0, ftCreationTime.dwHighDateTime=0x1d5e0ab, ftLastAccessTime.dwLowDateTime=0x60f9b680, ftLastAccessTime.dwHighDateTime=0x1d5ebba, ftLastWriteTime.dwLowDateTime=0x60f9b680, ftLastWriteTime.dwHighDateTime=0x1d5ebba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.198] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3033b50, ftCreationTime.dwHighDateTime=0x1d5e59c, ftLastAccessTime.dwLowDateTime=0x871b4580, ftLastAccessTime.dwHighDateTime=0x1d5e7a1, ftLastWriteTime.dwLowDateTime=0x871b4580, ftLastWriteTime.dwHighDateTime=0x1d5e7a1, nFileSizeHigh=0x0, nFileSizeLow=0x8cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="4IRj_wFuU6m-l kkjaZY.wav", cAlternateFileName="4IRJ_W~1.WAV")) returned 1 [0118.198] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef71590, ftCreationTime.dwHighDateTime=0x1d5ebf0, ftLastAccessTime.dwLowDateTime=0xba3ee310, ftLastAccessTime.dwHighDateTime=0x1d5e91b, ftLastWriteTime.dwLowDateTime=0xba3ee310, ftLastWriteTime.dwHighDateTime=0x1d5e91b, nFileSizeHigh=0x0, nFileSizeLow=0x36d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="7n2vD80O.m4a", cAlternateFileName="")) returned 1 [0118.198] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9627fdb0, ftCreationTime.dwHighDateTime=0x1d5ef90, ftLastAccessTime.dwLowDateTime=0x9a43b820, ftLastAccessTime.dwHighDateTime=0x1d5eb09, ftLastWriteTime.dwLowDateTime=0x9a43b820, ftLastWriteTime.dwHighDateTime=0x1d5eb09, nFileSizeHigh=0x0, nFileSizeLow=0x18d64, dwReserved0=0x0, dwReserved1=0x0, cFileName="9277riL.m4a", cAlternateFileName="")) returned 1 [0118.198] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa0cb0a0, ftCreationTime.dwHighDateTime=0x1d5ef77, ftLastAccessTime.dwLowDateTime=0x6b0c8a0, ftLastAccessTime.dwHighDateTime=0x1d5e1ef, ftLastWriteTime.dwLowDateTime=0x6b0c8a0, ftLastWriteTime.dwHighDateTime=0x1d5e1ef, nFileSizeHigh=0x0, nFileSizeLow=0x1532b, dwReserved0=0x0, dwReserved1=0x0, cFileName="C6yoIpfEMh8.mp3", cAlternateFileName="C6YOIP~1.MP3")) returned 1 [0118.198] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dde90d0, ftCreationTime.dwHighDateTime=0x1d5e265, ftLastAccessTime.dwLowDateTime=0xca3b07f0, ftLastAccessTime.dwHighDateTime=0x1d5e941, ftLastWriteTime.dwLowDateTime=0xca3b07f0, ftLastWriteTime.dwHighDateTime=0x1d5e941, nFileSizeHigh=0x0, nFileSizeLow=0x184d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="o_TFz1BuZ8.m4a", cAlternateFileName="O_TFZ1~1.M4A")) returned 1 [0118.198] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ee1970, ftCreationTime.dwHighDateTime=0x1d5e34d, ftLastAccessTime.dwLowDateTime=0x62e6bc80, ftLastAccessTime.dwHighDateTime=0x1d5e864, ftLastWriteTime.dwLowDateTime=0x62e6bc80, ftLastWriteTime.dwHighDateTime=0x1d5e864, nFileSizeHigh=0x0, nFileSizeLow=0x6693, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2HNTlPT00xmgRrxJ8f.wav", cAlternateFileName="T2HNTL~1.WAV")) returned 1 [0118.198] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.199] FindClose (in: hFindFile=0x77e180 | out: hFindFile=0x77e180) returned 1 [0118.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0118.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0118.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0118.199] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a", lpFilePart=0x0) returned 0x36 [0118.199] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e6172f0, ftCreationTime.dwHighDateTime=0x1d5e0ab, ftLastAccessTime.dwLowDateTime=0x60f9b680, ftLastAccessTime.dwHighDateTime=0x1d5ebba, ftLastWriteTime.dwLowDateTime=0x60f9b680, ftLastWriteTime.dwHighDateTime=0x1d5ebba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e240 [0118.199] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e6172f0, ftCreationTime.dwHighDateTime=0x1d5e0ab, ftLastAccessTime.dwLowDateTime=0x60f9b680, ftLastAccessTime.dwHighDateTime=0x1d5ebba, ftLastWriteTime.dwLowDateTime=0x60f9b680, ftLastWriteTime.dwHighDateTime=0x1d5ebba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.199] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3033b50, ftCreationTime.dwHighDateTime=0x1d5e59c, ftLastAccessTime.dwLowDateTime=0x871b4580, ftLastAccessTime.dwHighDateTime=0x1d5e7a1, ftLastWriteTime.dwLowDateTime=0x871b4580, ftLastWriteTime.dwHighDateTime=0x1d5e7a1, nFileSizeHigh=0x0, nFileSizeLow=0x8cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="4IRj_wFuU6m-l kkjaZY.wav", cAlternateFileName="4IRJ_W~1.WAV")) returned 1 [0118.199] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef71590, ftCreationTime.dwHighDateTime=0x1d5ebf0, ftLastAccessTime.dwLowDateTime=0xba3ee310, ftLastAccessTime.dwHighDateTime=0x1d5e91b, ftLastWriteTime.dwLowDateTime=0xba3ee310, ftLastWriteTime.dwHighDateTime=0x1d5e91b, nFileSizeHigh=0x0, nFileSizeLow=0x36d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="7n2vD80O.m4a", cAlternateFileName="")) returned 1 [0118.200] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9627fdb0, ftCreationTime.dwHighDateTime=0x1d5ef90, ftLastAccessTime.dwLowDateTime=0x9a43b820, ftLastAccessTime.dwHighDateTime=0x1d5eb09, ftLastWriteTime.dwLowDateTime=0x9a43b820, ftLastWriteTime.dwHighDateTime=0x1d5eb09, nFileSizeHigh=0x0, nFileSizeLow=0x18d64, dwReserved0=0x0, dwReserved1=0x0, cFileName="9277riL.m4a", cAlternateFileName="")) returned 1 [0118.200] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa0cb0a0, ftCreationTime.dwHighDateTime=0x1d5ef77, ftLastAccessTime.dwLowDateTime=0x6b0c8a0, ftLastAccessTime.dwHighDateTime=0x1d5e1ef, ftLastWriteTime.dwLowDateTime=0x6b0c8a0, ftLastWriteTime.dwHighDateTime=0x1d5e1ef, nFileSizeHigh=0x0, nFileSizeLow=0x1532b, dwReserved0=0x0, dwReserved1=0x0, cFileName="C6yoIpfEMh8.mp3", cAlternateFileName="C6YOIP~1.MP3")) returned 1 [0118.200] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dde90d0, ftCreationTime.dwHighDateTime=0x1d5e265, ftLastAccessTime.dwLowDateTime=0xca3b07f0, ftLastAccessTime.dwHighDateTime=0x1d5e941, ftLastWriteTime.dwLowDateTime=0xca3b07f0, ftLastWriteTime.dwHighDateTime=0x1d5e941, nFileSizeHigh=0x0, nFileSizeLow=0x184d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="o_TFz1BuZ8.m4a", cAlternateFileName="O_TFZ1~1.M4A")) returned 1 [0118.200] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ee1970, ftCreationTime.dwHighDateTime=0x1d5e34d, ftLastAccessTime.dwLowDateTime=0x62e6bc80, ftLastAccessTime.dwHighDateTime=0x1d5e864, ftLastWriteTime.dwLowDateTime=0x62e6bc80, ftLastWriteTime.dwHighDateTime=0x1d5e864, nFileSizeHigh=0x0, nFileSizeLow=0x6693, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2HNTlPT00xmgRrxJ8f.wav", cAlternateFileName="T2HNTL~1.WAV")) returned 1 [0118.200] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ee1970, ftCreationTime.dwHighDateTime=0x1d5e34d, ftLastAccessTime.dwLowDateTime=0x62e6bc80, ftLastAccessTime.dwHighDateTime=0x1d5e864, ftLastWriteTime.dwLowDateTime=0x62e6bc80, ftLastWriteTime.dwHighDateTime=0x1d5e864, nFileSizeHigh=0x0, nFileSizeLow=0x6693, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2HNTlPT00xmgRrxJ8f.wav", cAlternateFileName="T2HNTL~1.WAV")) returned 0 [0118.200] FindClose (in: hFindFile=0x77e240 | out: hFindFile=0x77e240) returned 1 [0118.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0118.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0118.201] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3", nBufferLength=0x105, lpBuffer=0x4fe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3", lpFilePart=0x0) returned 0x46 [0118.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0118.201] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\kieyj5as1a\\c6yoipfemh8.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.201] GetFileType (hFile=0x404) returned 0x1 [0118.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0118.201] GetFileType (hFile=0x404) returned 0x1 [0118.201] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe6e4 | out: lpFileSizeHigh=0x4fe6e4*=0x0) returned 0x1532b [0118.202] ReadFile (in: hFile=0x404, lpBuffer=0x354ca40, nNumberOfBytesToRead=0x1532b, lpNumberOfBytesRead=0x4fe690, lpOverlapped=0x0 | out: lpBuffer=0x354ca40*, lpNumberOfBytesRead=0x4fe690*=0x1532b, lpOverlapped=0x0) returned 1 [0118.204] CloseHandle (hObject=0x404) returned 1 [0118.229] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0118.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe6d8 | out: lpFileInformation=0x4fe6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0118.229] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3", nBufferLength=0x105, lpBuffer=0x4fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3", lpFilePart=0x0) returned 0x46 [0118.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5d4) returned 1 [0118.229] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\kieyj5as1a\\c6yoipfemh8.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.231] GetFileType (hFile=0x404) returned 0x1 [0118.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5d0) returned 1 [0118.231] GetFileType (hFile=0x404) returned 0x1 [0118.231] WriteFile (in: hFile=0x404, lpBuffer=0x35b6a68*, nNumberOfBytesToWrite=0x15330, lpNumberOfBytesWritten=0x4fe684, lpOverlapped=0x0 | out: lpBuffer=0x35b6a68*, lpNumberOfBytesWritten=0x4fe684*=0x15330, lpOverlapped=0x0) returned 1 [0118.233] CloseHandle (hObject=0x404) returned 1 [0118.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3", lpFilePart=0x0) returned 0x46 [0118.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3.klavins", lpFilePart=0x0) returned 0x4e [0118.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe668) returned 1 [0118.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\kieyj5as1a\\c6yoipfemh8.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe6e4 | out: lpFileInformation=0x4fe6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa0cb0a0, ftCreationTime.dwHighDateTime=0x1d5ef77, ftLastAccessTime.dwLowDateTime=0x6b0c8a0, ftLastAccessTime.dwHighDateTime=0x1d5e1ef, ftLastWriteTime.dwLowDateTime=0x88910733, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x15330)) returned 1 [0118.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe664) returned 1 [0118.237] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\kieyj5as1a\\c6yoipfemh8.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\kieyJ5AS1a\\C6yoIpfEMh8.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\kieyj5as1a\\c6yoipfemh8.mp3.klavins")) returned 1 [0118.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0118.238] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU", lpFilePart=0x0) returned 0x39 [0118.238] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd64948b0, ftCreationTime.dwHighDateTime=0x1d5e183, ftLastAccessTime.dwLowDateTime=0x89aba040, ftLastAccessTime.dwHighDateTime=0x1d5e794, ftLastWriteTime.dwLowDateTime=0x89aba040, ftLastWriteTime.dwHighDateTime=0x1d5e794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dd80 [0118.238] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd64948b0, ftCreationTime.dwHighDateTime=0x1d5e183, ftLastAccessTime.dwLowDateTime=0x89aba040, ftLastAccessTime.dwHighDateTime=0x1d5e794, ftLastWriteTime.dwLowDateTime=0x89aba040, ftLastWriteTime.dwHighDateTime=0x1d5e794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.238] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487219a0, ftCreationTime.dwHighDateTime=0x1d5e178, ftLastAccessTime.dwLowDateTime=0x87eb6a50, ftLastAccessTime.dwHighDateTime=0x1d5e57e, ftLastWriteTime.dwLowDateTime=0x87eb6a50, ftLastWriteTime.dwHighDateTime=0x1d5e57e, nFileSizeHigh=0x0, nFileSizeLow=0x944a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J4zixoRAM85ZU_.mp3", cAlternateFileName="J4ZIXO~1.MP3")) returned 1 [0118.238] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffeacf50, ftCreationTime.dwHighDateTime=0x1d5e24f, ftLastAccessTime.dwLowDateTime=0x3f9dd320, ftLastAccessTime.dwHighDateTime=0x1d5eea5, ftLastWriteTime.dwLowDateTime=0x3f9dd320, ftLastWriteTime.dwHighDateTime=0x1d5eea5, nFileSizeHigh=0x0, nFileSizeLow=0xa1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="REHDq.m4a", cAlternateFileName="")) returned 1 [0118.239] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x979d8630, ftCreationTime.dwHighDateTime=0x1d5ebec, ftLastAccessTime.dwLowDateTime=0xa11bf4d0, ftLastAccessTime.dwHighDateTime=0x1d5ea43, ftLastWriteTime.dwLowDateTime=0xa11bf4d0, ftLastWriteTime.dwHighDateTime=0x1d5ea43, nFileSizeHigh=0x0, nFileSizeLow=0xb8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TvkUIQZ.mp3", cAlternateFileName="")) returned 1 [0118.239] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f94d0, ftCreationTime.dwHighDateTime=0x1d5eba1, ftLastAccessTime.dwLowDateTime=0x60638c30, ftLastAccessTime.dwHighDateTime=0x1d5ec16, ftLastWriteTime.dwLowDateTime=0x60638c30, ftLastWriteTime.dwHighDateTime=0x1d5ec16, nFileSizeHigh=0x0, nFileSizeLow=0xb782, dwReserved0=0x0, dwReserved1=0x0, cFileName="xvWtvx6.mp3", cAlternateFileName="")) returned 1 [0118.239] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.239] FindClose (in: hFindFile=0x77dd80 | out: hFindFile=0x77dd80) returned 1 [0118.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0118.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0118.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0118.239] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU", lpFilePart=0x0) returned 0x39 [0118.239] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd64948b0, ftCreationTime.dwHighDateTime=0x1d5e183, ftLastAccessTime.dwLowDateTime=0x89aba040, ftLastAccessTime.dwHighDateTime=0x1d5e794, ftLastWriteTime.dwLowDateTime=0x89aba040, ftLastWriteTime.dwHighDateTime=0x1d5e794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dfc0 [0118.239] FindNextFileW (in: hFindFile=0x77dfc0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd64948b0, ftCreationTime.dwHighDateTime=0x1d5e183, ftLastAccessTime.dwLowDateTime=0x89aba040, ftLastAccessTime.dwHighDateTime=0x1d5e794, ftLastWriteTime.dwLowDateTime=0x89aba040, ftLastWriteTime.dwHighDateTime=0x1d5e794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.240] FindNextFileW (in: hFindFile=0x77dfc0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487219a0, ftCreationTime.dwHighDateTime=0x1d5e178, ftLastAccessTime.dwLowDateTime=0x87eb6a50, ftLastAccessTime.dwHighDateTime=0x1d5e57e, ftLastWriteTime.dwLowDateTime=0x87eb6a50, ftLastWriteTime.dwHighDateTime=0x1d5e57e, nFileSizeHigh=0x0, nFileSizeLow=0x944a, dwReserved0=0x0, dwReserved1=0x0, cFileName="J4zixoRAM85ZU_.mp3", cAlternateFileName="J4ZIXO~1.MP3")) returned 1 [0118.240] FindNextFileW (in: hFindFile=0x77dfc0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffeacf50, ftCreationTime.dwHighDateTime=0x1d5e24f, ftLastAccessTime.dwLowDateTime=0x3f9dd320, ftLastAccessTime.dwHighDateTime=0x1d5eea5, ftLastWriteTime.dwLowDateTime=0x3f9dd320, ftLastWriteTime.dwHighDateTime=0x1d5eea5, nFileSizeHigh=0x0, nFileSizeLow=0xa1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="REHDq.m4a", cAlternateFileName="")) returned 1 [0118.240] FindNextFileW (in: hFindFile=0x77dfc0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x979d8630, ftCreationTime.dwHighDateTime=0x1d5ebec, ftLastAccessTime.dwLowDateTime=0xa11bf4d0, ftLastAccessTime.dwHighDateTime=0x1d5ea43, ftLastWriteTime.dwLowDateTime=0xa11bf4d0, ftLastWriteTime.dwHighDateTime=0x1d5ea43, nFileSizeHigh=0x0, nFileSizeLow=0xb8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TvkUIQZ.mp3", cAlternateFileName="")) returned 1 [0118.240] FindNextFileW (in: hFindFile=0x77dfc0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f94d0, ftCreationTime.dwHighDateTime=0x1d5eba1, ftLastAccessTime.dwLowDateTime=0x60638c30, ftLastAccessTime.dwHighDateTime=0x1d5ec16, ftLastWriteTime.dwLowDateTime=0x60638c30, ftLastWriteTime.dwHighDateTime=0x1d5ec16, nFileSizeHigh=0x0, nFileSizeLow=0xb782, dwReserved0=0x0, dwReserved1=0x0, cFileName="xvWtvx6.mp3", cAlternateFileName="")) returned 1 [0118.240] FindNextFileW (in: hFindFile=0x77dfc0, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f94d0, ftCreationTime.dwHighDateTime=0x1d5eba1, ftLastAccessTime.dwLowDateTime=0x60638c30, ftLastAccessTime.dwHighDateTime=0x1d5ec16, ftLastWriteTime.dwLowDateTime=0x60638c30, ftLastWriteTime.dwHighDateTime=0x1d5ec16, nFileSizeHigh=0x0, nFileSizeLow=0xb782, dwReserved0=0x0, dwReserved1=0x0, cFileName="xvWtvx6.mp3", cAlternateFileName="")) returned 0 [0118.241] FindClose (in: hFindFile=0x77dfc0 | out: hFindFile=0x77dfc0) returned 1 [0118.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0118.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0118.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3", nBufferLength=0x105, lpBuffer=0x4fe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3", lpFilePart=0x0) returned 0x4c [0118.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0118.241] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\j4zixoram85zu_.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.241] GetFileType (hFile=0x404) returned 0x1 [0118.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0118.241] GetFileType (hFile=0x404) returned 0x1 [0118.241] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe6e4 | out: lpFileSizeHigh=0x4fe6e4*=0x0) returned 0x944a [0118.241] ReadFile (in: hFile=0x404, lpBuffer=0x2572224, nNumberOfBytesToRead=0x944a, lpNumberOfBytesRead=0x4fe690, lpOverlapped=0x0 | out: lpBuffer=0x2572224*, lpNumberOfBytesRead=0x4fe690*=0x944a, lpOverlapped=0x0) returned 1 [0118.242] CloseHandle (hObject=0x404) returned 1 [0118.300] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0118.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe6d8 | out: lpFileInformation=0x4fe6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0118.301] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3", nBufferLength=0x105, lpBuffer=0x4fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3", lpFilePart=0x0) returned 0x4c [0118.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5d4) returned 1 [0118.301] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\j4zixoram85zu_.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.302] GetFileType (hFile=0x404) returned 0x1 [0118.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5d0) returned 1 [0118.302] GetFileType (hFile=0x404) returned 0x1 [0118.302] WriteFile (in: hFile=0x404, lpBuffer=0x23f7aac*, nNumberOfBytesToWrite=0x9450, lpNumberOfBytesWritten=0x4fe684, lpOverlapped=0x0 | out: lpBuffer=0x23f7aac*, lpNumberOfBytesWritten=0x4fe684*=0x9450, lpOverlapped=0x0) returned 1 [0118.304] CloseHandle (hObject=0x404) returned 1 [0118.306] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3", lpFilePart=0x0) returned 0x4c [0118.306] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3.klavins", lpFilePart=0x0) returned 0x54 [0118.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe668) returned 1 [0118.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\j4zixoram85zu_.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe6e4 | out: lpFileInformation=0x4fe6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487219a0, ftCreationTime.dwHighDateTime=0x1d5e178, ftLastAccessTime.dwLowDateTime=0x87eb6a50, ftLastAccessTime.dwHighDateTime=0x1d5e57e, ftLastWriteTime.dwLowDateTime=0x889a8f28, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x9450)) returned 1 [0118.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe664) returned 1 [0118.307] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\j4zixoram85zu_.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\J4zixoRAM85ZU_.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\j4zixoram85zu_.mp3.klavins")) returned 1 [0118.308] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3", nBufferLength=0x105, lpBuffer=0x4fe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3", lpFilePart=0x0) returned 0x45 [0118.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0118.308] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\tvkuiqz.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.308] GetFileType (hFile=0x404) returned 0x1 [0118.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0118.308] GetFileType (hFile=0x404) returned 0x1 [0118.308] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe6e4 | out: lpFileSizeHigh=0x4fe6e4*=0x0) returned 0xb8d [0118.308] ReadFile (in: hFile=0x404, lpBuffer=0x2402060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x4fe690, lpOverlapped=0x0 | out: lpBuffer=0x2402060*, lpNumberOfBytesRead=0x4fe690*=0xb8d, lpOverlapped=0x0) returned 1 [0118.309] CloseHandle (hObject=0x404) returned 1 [0118.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0118.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe6d8 | out: lpFileInformation=0x4fe6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0118.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3", nBufferLength=0x105, lpBuffer=0x4fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3", lpFilePart=0x0) returned 0x45 [0118.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5d4) returned 1 [0118.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\tvkuiqz.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.337] GetFileType (hFile=0x404) returned 0x1 [0118.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5d0) returned 1 [0118.337] GetFileType (hFile=0x404) returned 0x1 [0118.337] WriteFile (in: hFile=0x404, lpBuffer=0x2453bc0*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x4fe658, lpOverlapped=0x0 | out: lpBuffer=0x2453bc0*, lpNumberOfBytesWritten=0x4fe658*=0xb90, lpOverlapped=0x0) returned 1 [0118.338] CloseHandle (hObject=0x404) returned 1 [0118.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3", lpFilePart=0x0) returned 0x45 [0118.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3.klavins", lpFilePart=0x0) returned 0x4d [0118.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe668) returned 1 [0118.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\tvkuiqz.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe6e4 | out: lpFileInformation=0x4fe6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x979d8630, ftCreationTime.dwHighDateTime=0x1d5ebec, ftLastAccessTime.dwLowDateTime=0xa11bf4d0, ftLastAccessTime.dwHighDateTime=0x1d5ea43, ftLastWriteTime.dwLowDateTime=0x889f53cb, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0118.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe664) returned 1 [0118.340] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\tvkuiqz.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\TvkUIQZ.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\tvkuiqz.mp3.klavins")) returned 1 [0118.341] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3", nBufferLength=0x105, lpBuffer=0x4fe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3", lpFilePart=0x0) returned 0x45 [0118.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0118.341] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\xvwtvx6.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.342] GetFileType (hFile=0x404) returned 0x1 [0118.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0118.342] GetFileType (hFile=0x404) returned 0x1 [0118.342] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe6e4 | out: lpFileSizeHigh=0x4fe6e4*=0x0) returned 0xb782 [0118.342] ReadFile (in: hFile=0x404, lpBuffer=0x2454ee4, nNumberOfBytesToRead=0xb782, lpNumberOfBytesRead=0x4fe690, lpOverlapped=0x0 | out: lpBuffer=0x2454ee4*, lpNumberOfBytesRead=0x4fe690*=0xb782, lpOverlapped=0x0) returned 1 [0118.345] CloseHandle (hObject=0x404) returned 1 [0118.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0118.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe6d8 | out: lpFileInformation=0x4fe6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0118.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3", nBufferLength=0x105, lpBuffer=0x4fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3", lpFilePart=0x0) returned 0x45 [0118.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5d4) returned 1 [0118.376] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\xvwtvx6.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.378] GetFileType (hFile=0x404) returned 0x1 [0118.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5d0) returned 1 [0118.378] GetFileType (hFile=0x404) returned 0x1 [0118.378] WriteFile (in: hFile=0x404, lpBuffer=0x24c4394*, nNumberOfBytesToWrite=0xb790, lpNumberOfBytesWritten=0x4fe684, lpOverlapped=0x0 | out: lpBuffer=0x24c4394*, lpNumberOfBytesWritten=0x4fe684*=0xb790, lpOverlapped=0x0) returned 1 [0118.380] CloseHandle (hObject=0x404) returned 1 [0118.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3", lpFilePart=0x0) returned 0x45 [0118.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3.klavins", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3.klavins", lpFilePart=0x0) returned 0x4d [0118.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe668) returned 1 [0118.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\xvwtvx6.mp3"), fInfoLevelId=0x0, lpFileInformation=0x4fe6e4 | out: lpFileInformation=0x4fe6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f94d0, ftCreationTime.dwHighDateTime=0x1d5eba1, ftLastAccessTime.dwLowDateTime=0x60638c30, ftLastAccessTime.dwHighDateTime=0x1d5ec16, ftLastWriteTime.dwLowDateTime=0x88a68b16, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xb790)) returned 1 [0118.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe664) returned 1 [0118.383] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\xvwtvx6.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\WLmCv\\_0yROMHaywmWB62\\pezVtXsxWzeTU\\xvWtvx6.mp3.klavins" (normalized: "c:\\users\\fd1hvy\\music\\wlmcv\\_0yromhaywmwb62\\pezvtxsxwzetu\\xvwtvx6.mp3.klavins")) returned 1 [0118.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0118.384] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18 [0118.384] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dc00 [0118.392] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.393] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.393] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.393] FindClose (in: hFindFile=0x77dc00 | out: hFindFile=0x77dc00) returned 1 [0118.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0118.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0118.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0118.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18 [0118.393] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77df00 [0118.394] FindNextFileW (in: hFindFile=0x77df00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.394] FindNextFileW (in: hFindFile=0x77df00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.394] FindNextFileW (in: hFindFile=0x77df00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0118.394] FindClose (in: hFindFile=0x77df00 | out: hFindFile=0x77df00) returned 1 [0118.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0118.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0118.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0118.395] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Saved Games", lpFilePart=0x0) returned 0x1b [0118.395] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dc00 [0118.395] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.395] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.395] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.396] FindClose (in: hFindFile=0x77dc00 | out: hFindFile=0x77dc00) returned 1 [0118.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0118.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0118.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0118.396] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Saved Games", lpFilePart=0x0) returned 0x1b [0118.396] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e000 [0118.396] FindNextFileW (in: hFindFile=0x77e000, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.396] FindNextFileW (in: hFindFile=0x77e000, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.397] FindNextFileW (in: hFindFile=0x77e000, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0118.397] FindClose (in: hFindFile=0x77e000 | out: hFindFile=0x77e000) returned 1 [0118.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0118.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0118.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0118.397] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites", lpFilePart=0x0) returned 0x19 [0118.397] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dc00 [0118.397] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.398] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1 [0118.398] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.398] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0118.398] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 0 [0118.398] FindClose (in: hFindFile=0x77dc00 | out: hFindFile=0x77dc00) returned 1 [0118.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0118.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0118.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0118.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites", lpFilePart=0x0) returned 0x19 [0118.399] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e240 [0118.399] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.399] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1 [0118.399] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.400] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0118.400] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.400] FindClose (in: hFindFile=0x77e240 | out: hFindFile=0x77e240) returned 1 [0118.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0118.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0118.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0118.400] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Links", lpFilePart=0x0) returned 0x1f [0118.400] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e240 [0118.401] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.401] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.401] FindNextFileW (in: hFindFile=0x77e240, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.401] FindClose (in: hFindFile=0x77e240 | out: hFindFile=0x77e240) returned 1 [0118.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0118.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0118.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0118.402] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Links", lpFilePart=0x0) returned 0x1f [0118.402] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dfc0 [0118.402] FindNextFileW (in: hFindFile=0x77dfc0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.402] FindNextFileW (in: hFindFile=0x77dfc0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.402] FindNextFileW (in: hFindFile=0x77dfc0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0118.402] FindClose (in: hFindFile=0x77dfc0 | out: hFindFile=0x77dfc0) returned 1 [0118.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0118.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0118.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0118.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches", lpFilePart=0x0) returned 0x18 [0118.403] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e1c0 [0118.403] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.403] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.404] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0118.404] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0118.404] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 1 [0118.404] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.404] FindClose (in: hFindFile=0x77e1c0 | out: hFindFile=0x77e1c0) returned 1 [0118.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0118.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0118.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0118.404] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches", lpFilePart=0x0) returned 0x18 [0118.405] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dc00 [0118.405] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.405] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.405] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0118.405] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0118.406] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 1 [0118.406] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 0 [0118.406] FindClose (in: hFindFile=0x77dc00 | out: hFindFile=0x77dc00) returned 1 [0118.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0118.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0118.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0118.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0118.406] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7345ea0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7345ea0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e1c0 [0118.407] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7345ea0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7345ea0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.407] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.407] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe424eae0, ftCreationTime.dwHighDateTime=0x1d5ed57, ftLastAccessTime.dwLowDateTime=0x83a92c0, ftLastAccessTime.dwHighDateTime=0x1d5e238, ftLastWriteTime.dwLowDateTime=0x83a92c0, ftLastWriteTime.dwHighDateTime=0x1d5e238, nFileSizeHigh=0x0, nFileSizeLow=0xedaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ekjH7sDmNVPwRikoTN.mp4", cAlternateFileName="EKJH7S~1.MP4")) returned 1 [0118.407] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93495e10, ftCreationTime.dwHighDateTime=0x1d5e377, ftLastAccessTime.dwLowDateTime=0x207a1420, ftLastAccessTime.dwHighDateTime=0x1d5e619, ftLastWriteTime.dwLowDateTime=0x207a1420, ftLastWriteTime.dwHighDateTime=0x1d5e619, nFileSizeHigh=0x0, nFileSizeLow=0xd28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="inxV0iKqTiQculm7nu.swf", cAlternateFileName="INXV0I~1.SWF")) returned 1 [0118.408] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd867460, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0x8067c080, ftLastAccessTime.dwHighDateTime=0x1d5eb28, ftLastWriteTime.dwLowDateTime=0x8067c080, ftLastWriteTime.dwHighDateTime=0x1d5eb28, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPUUgAznNxhcK48TDUa.mkv", cAlternateFileName="JPUUGA~1.MKV")) returned 1 [0118.408] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d75240, ftCreationTime.dwHighDateTime=0x1d5e19f, ftLastAccessTime.dwLowDateTime=0xffa0e990, ftLastAccessTime.dwHighDateTime=0x1d5f03b, ftLastWriteTime.dwLowDateTime=0xffa0e990, ftLastWriteTime.dwHighDateTime=0x1d5f03b, nFileSizeHigh=0x0, nFileSizeLow=0x58c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="kDGc-Xgc2shNr4vrZT.mkv", cAlternateFileName="KDGC-X~1.MKV")) returned 1 [0118.408] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae1ec9a0, ftCreationTime.dwHighDateTime=0x1d5e1d3, ftLastAccessTime.dwLowDateTime=0x72e7ab60, ftLastAccessTime.dwHighDateTime=0x1d5e4b0, ftLastWriteTime.dwLowDateTime=0x72e7ab60, ftLastWriteTime.dwHighDateTime=0x1d5e4b0, nFileSizeHigh=0x0, nFileSizeLow=0x1297c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sB-YTh6ciDeYAp8ZBPh_.mkv", cAlternateFileName="SB-YTH~1.MKV")) returned 1 [0118.408] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7112a860, ftCreationTime.dwHighDateTime=0x1d5ea02, ftLastAccessTime.dwLowDateTime=0xac8de60, ftLastAccessTime.dwHighDateTime=0x1d5e6d0, ftLastWriteTime.dwLowDateTime=0xac8de60, ftLastWriteTime.dwHighDateTime=0x1d5e6d0, nFileSizeHigh=0x0, nFileSizeLow=0xe910, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wx_Kv3R.mkv", cAlternateFileName="")) returned 1 [0118.408] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ff81c0, ftCreationTime.dwHighDateTime=0x1d5ee6f, ftLastAccessTime.dwLowDateTime=0x12d643a0, ftLastAccessTime.dwHighDateTime=0x1d5edf5, ftLastWriteTime.dwLowDateTime=0x12d643a0, ftLastWriteTime.dwHighDateTime=0x1d5edf5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YSFmOD gwJSu xU3b", cAlternateFileName="YSFMOD~1")) returned 1 [0118.408] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fbab880, ftCreationTime.dwHighDateTime=0x1d5ebbb, ftLastAccessTime.dwLowDateTime=0xa96ecc70, ftLastAccessTime.dwHighDateTime=0x1d5e831, ftLastWriteTime.dwLowDateTime=0xa96ecc70, ftLastWriteTime.dwHighDateTime=0x1d5e831, nFileSizeHigh=0x0, nFileSizeLow=0x146ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="zDtDV0S0Vm9.flv", cAlternateFileName="ZDTDV0~1.FLV")) returned 1 [0118.409] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.409] FindClose (in: hFindFile=0x77e1c0 | out: hFindFile=0x77e1c0) returned 1 [0118.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0118.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0118.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe898) returned 1 [0118.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0x4fe34c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0118.409] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0x4fe5c0 | out: lpFindFileData=0x4fe5c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7345ea0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7345ea0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e1c0 [0118.409] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe7345ea0, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe7345ea0, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.410] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0118.410] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe424eae0, ftCreationTime.dwHighDateTime=0x1d5ed57, ftLastAccessTime.dwLowDateTime=0x83a92c0, ftLastAccessTime.dwHighDateTime=0x1d5e238, ftLastWriteTime.dwLowDateTime=0x83a92c0, ftLastWriteTime.dwHighDateTime=0x1d5e238, nFileSizeHigh=0x0, nFileSizeLow=0xedaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ekjH7sDmNVPwRikoTN.mp4", cAlternateFileName="EKJH7S~1.MP4")) returned 1 [0118.410] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93495e10, ftCreationTime.dwHighDateTime=0x1d5e377, ftLastAccessTime.dwLowDateTime=0x207a1420, ftLastAccessTime.dwHighDateTime=0x1d5e619, ftLastWriteTime.dwLowDateTime=0x207a1420, ftLastWriteTime.dwHighDateTime=0x1d5e619, nFileSizeHigh=0x0, nFileSizeLow=0xd28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="inxV0iKqTiQculm7nu.swf", cAlternateFileName="INXV0I~1.SWF")) returned 1 [0118.410] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd867460, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0x8067c080, ftLastAccessTime.dwHighDateTime=0x1d5eb28, ftLastWriteTime.dwLowDateTime=0x8067c080, ftLastWriteTime.dwHighDateTime=0x1d5eb28, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="JPUUgAznNxhcK48TDUa.mkv", cAlternateFileName="JPUUGA~1.MKV")) returned 1 [0118.410] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d75240, ftCreationTime.dwHighDateTime=0x1d5e19f, ftLastAccessTime.dwLowDateTime=0xffa0e990, ftLastAccessTime.dwHighDateTime=0x1d5f03b, ftLastWriteTime.dwLowDateTime=0xffa0e990, ftLastWriteTime.dwHighDateTime=0x1d5f03b, nFileSizeHigh=0x0, nFileSizeLow=0x58c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="kDGc-Xgc2shNr4vrZT.mkv", cAlternateFileName="KDGC-X~1.MKV")) returned 1 [0118.410] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae1ec9a0, ftCreationTime.dwHighDateTime=0x1d5e1d3, ftLastAccessTime.dwLowDateTime=0x72e7ab60, ftLastAccessTime.dwHighDateTime=0x1d5e4b0, ftLastWriteTime.dwLowDateTime=0x72e7ab60, ftLastWriteTime.dwHighDateTime=0x1d5e4b0, nFileSizeHigh=0x0, nFileSizeLow=0x1297c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sB-YTh6ciDeYAp8ZBPh_.mkv", cAlternateFileName="SB-YTH~1.MKV")) returned 1 [0118.410] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7112a860, ftCreationTime.dwHighDateTime=0x1d5ea02, ftLastAccessTime.dwLowDateTime=0xac8de60, ftLastAccessTime.dwHighDateTime=0x1d5e6d0, ftLastWriteTime.dwLowDateTime=0xac8de60, ftLastWriteTime.dwHighDateTime=0x1d5e6d0, nFileSizeHigh=0x0, nFileSizeLow=0xe910, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wx_Kv3R.mkv", cAlternateFileName="")) returned 1 [0118.411] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ff81c0, ftCreationTime.dwHighDateTime=0x1d5ee6f, ftLastAccessTime.dwLowDateTime=0x12d643a0, ftLastAccessTime.dwHighDateTime=0x1d5edf5, ftLastWriteTime.dwLowDateTime=0x12d643a0, ftLastWriteTime.dwHighDateTime=0x1d5edf5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YSFmOD gwJSu xU3b", cAlternateFileName="YSFMOD~1")) returned 1 [0118.411] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fbab880, ftCreationTime.dwHighDateTime=0x1d5ebbb, ftLastAccessTime.dwLowDateTime=0xa96ecc70, ftLastAccessTime.dwHighDateTime=0x1d5e831, ftLastWriteTime.dwLowDateTime=0xa96ecc70, ftLastWriteTime.dwHighDateTime=0x1d5e831, nFileSizeHigh=0x0, nFileSizeLow=0x146ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="zDtDV0S0Vm9.flv", cAlternateFileName="ZDTDV0~1.FLV")) returned 1 [0118.411] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe5cc | out: lpFindFileData=0x4fe5cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fbab880, ftCreationTime.dwHighDateTime=0x1d5ebbb, ftLastAccessTime.dwLowDateTime=0xa96ecc70, ftLastAccessTime.dwHighDateTime=0x1d5e831, ftLastWriteTime.dwLowDateTime=0xa96ecc70, ftLastWriteTime.dwHighDateTime=0x1d5e831, nFileSizeHigh=0x0, nFileSizeLow=0x146ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="zDtDV0S0Vm9.flv", cAlternateFileName="ZDTDV0~1.FLV")) returned 0 [0118.411] FindClose (in: hFindFile=0x77e1c0 | out: hFindFile=0x77e1c0) returned 1 [0118.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe854) returned 1 [0118.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe860) returned 1 [0118.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4", lpFilePart=0x0) returned 0x2d [0118.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0118.411] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ekjh7sdmnvpwrikotn.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.412] GetFileType (hFile=0x404) returned 0x1 [0118.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0118.412] GetFileType (hFile=0x404) returned 0x1 [0118.412] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xedaa [0118.412] ReadFile (in: hFile=0x404, lpBuffer=0x24d73d8, nNumberOfBytesToRead=0xedaa, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x24d73d8*, lpNumberOfBytesRead=0x4fe7ec*=0xedaa, lpOverlapped=0x0) returned 1 [0118.413] CloseHandle (hObject=0x404) returned 1 [0118.502] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0118.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0118.502] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4", lpFilePart=0x0) returned 0x2d [0118.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0118.502] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ekjh7sdmnvpwrikotn.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.504] GetFileType (hFile=0x404) returned 0x1 [0118.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0118.504] GetFileType (hFile=0x404) returned 0x1 [0118.504] WriteFile (in: hFile=0x404, lpBuffer=0x2550ae8*, nNumberOfBytesToWrite=0xedb0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2550ae8*, lpNumberOfBytesWritten=0x4fe7e0*=0xedb0, lpOverlapped=0x0) returned 1 [0118.507] CloseHandle (hObject=0x404) returned 1 [0118.510] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4", lpFilePart=0x0) returned 0x2d [0118.510] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4.klavins", lpFilePart=0x0) returned 0x35 [0118.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0118.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ekjh7sdmnvpwrikotn.mp4"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe424eae0, ftCreationTime.dwHighDateTime=0x1d5ed57, ftLastAccessTime.dwLowDateTime=0x83a92c0, ftLastAccessTime.dwHighDateTime=0x1d5e238, ftLastWriteTime.dwLowDateTime=0x88b98d20, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xedb0)) returned 1 [0118.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0118.510] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ekjh7sdmnvpwrikotn.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\ekjH7sDmNVPwRikoTN.mp4.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ekjh7sdmnvpwrikotn.mp4.klavins")) returned 1 [0118.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv", lpFilePart=0x0) returned 0x2e [0118.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0118.511] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\jpuugaznnxhck48tdua.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.511] GetFileType (hFile=0x404) returned 0x1 [0118.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0118.511] GetFileType (hFile=0x404) returned 0x1 [0118.511] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x1a3e [0118.511] ReadFile (in: hFile=0x404, lpBuffer=0x255fd54, nNumberOfBytesToRead=0x1a3e, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x255fd54*, lpNumberOfBytesRead=0x4fe7ec*=0x1a3e, lpOverlapped=0x0) returned 1 [0118.513] CloseHandle (hObject=0x404) returned 1 [0118.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0118.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0118.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv", lpFilePart=0x0) returned 0x2e [0118.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0118.545] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\jpuugaznnxhck48tdua.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.547] GetFileType (hFile=0x404) returned 0x1 [0118.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0118.547] GetFileType (hFile=0x404) returned 0x1 [0118.547] WriteFile (in: hFile=0x404, lpBuffer=0x25b4e80*, nNumberOfBytesToWrite=0x1a40, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x25b4e80*, lpNumberOfBytesWritten=0x4fe7e0*=0x1a40, lpOverlapped=0x0) returned 1 [0118.549] CloseHandle (hObject=0x404) returned 1 [0118.551] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv", lpFilePart=0x0) returned 0x2e [0118.551] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv.klavins", lpFilePart=0x0) returned 0x36 [0118.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0118.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\jpuugaznnxhck48tdua.mkv"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd867460, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0x8067c080, ftLastAccessTime.dwHighDateTime=0x1d5eb28, ftLastWriteTime.dwLowDateTime=0x88c0b5ee, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x1a40)) returned 1 [0118.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0118.552] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\jpuugaznnxhck48tdua.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\JPUUgAznNxhcK48TDUa.mkv.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\jpuugaznnxhck48tdua.mkv.klavins")) returned 1 [0118.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv", lpFilePart=0x0) returned 0x2d [0118.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0118.553] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\kdgc-xgc2shnr4vrzt.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.553] GetFileType (hFile=0x404) returned 0x1 [0118.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0118.553] GetFileType (hFile=0x404) returned 0x1 [0118.553] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x58c2 [0118.553] ReadFile (in: hFile=0x404, lpBuffer=0x25b6d70, nNumberOfBytesToRead=0x58c2, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x25b6d70*, lpNumberOfBytesRead=0x4fe7ec*=0x58c2, lpOverlapped=0x0) returned 1 [0118.554] CloseHandle (hObject=0x404) returned 1 [0118.633] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0118.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0118.633] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv", lpFilePart=0x0) returned 0x2d [0118.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0118.633] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\kdgc-xgc2shnr4vrzt.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.635] GetFileType (hFile=0x404) returned 0x1 [0118.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0118.635] GetFileType (hFile=0x404) returned 0x1 [0118.635] WriteFile (in: hFile=0x404, lpBuffer=0x2438438*, nNumberOfBytesToWrite=0x58d0, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x2438438*, lpNumberOfBytesWritten=0x4fe7e0*=0x58d0, lpOverlapped=0x0) returned 1 [0118.637] CloseHandle (hObject=0x404) returned 1 [0118.638] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv", lpFilePart=0x0) returned 0x2d [0118.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv.klavins", lpFilePart=0x0) returned 0x35 [0118.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0118.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\kdgc-xgc2shnr4vrzt.mkv"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88d75240, ftCreationTime.dwHighDateTime=0x1d5e19f, ftLastAccessTime.dwLowDateTime=0xffa0e990, ftLastAccessTime.dwHighDateTime=0x1d5f03b, ftLastWriteTime.dwLowDateTime=0x88cca07a, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x58d0)) returned 1 [0118.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0118.639] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\kdgc-xgc2shnr4vrzt.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\kDGc-Xgc2shNr4vrZT.mkv.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\kdgc-xgc2shnr4vrzt.mkv.klavins")) returned 1 [0118.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv", lpFilePart=0x0) returned 0x2f [0118.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0118.640] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\sb-yth6cideyap8zbph_.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.641] GetFileType (hFile=0x404) returned 0x1 [0118.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0118.641] GetFileType (hFile=0x404) returned 0x1 [0118.641] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0x1297c [0118.641] ReadFile (in: hFile=0x404, lpBuffer=0x243e1b0, nNumberOfBytesToRead=0x1297c, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x243e1b0*, lpNumberOfBytesRead=0x4fe7ec*=0x1297c, lpOverlapped=0x0) returned 1 [0118.643] CloseHandle (hObject=0x404) returned 1 [0118.671] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0118.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0118.671] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv", lpFilePart=0x0) returned 0x2f [0118.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0118.673] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\sb-yth6cideyap8zbph_.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.675] GetFileType (hFile=0x404) returned 0x1 [0118.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0118.675] GetFileType (hFile=0x404) returned 0x1 [0118.675] WriteFile (in: hFile=0x404, lpBuffer=0x24c2d88*, nNumberOfBytesToWrite=0x12980, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x24c2d88*, lpNumberOfBytesWritten=0x4fe7e0*=0x12980, lpOverlapped=0x0) returned 1 [0118.678] CloseHandle (hObject=0x404) returned 1 [0118.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv", lpFilePart=0x0) returned 0x2f [0118.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv.klavins", lpFilePart=0x0) returned 0x37 [0118.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0118.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\sb-yth6cideyap8zbph_.mkv"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae1ec9a0, ftCreationTime.dwHighDateTime=0x1d5e1d3, ftLastAccessTime.dwLowDateTime=0x72e7ab60, ftLastAccessTime.dwHighDateTime=0x1d5e4b0, ftLastWriteTime.dwLowDateTime=0x88d3c73e, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x12980)) returned 1 [0118.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0118.681] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\sb-yth6cideyap8zbph_.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\sB-YTh6ciDeYAp8ZBPh_.mkv.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\sb-yth6cideyap8zbph_.mkv.klavins")) returned 1 [0118.682] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv", nBufferLength=0x105, lpBuffer=0x4fe200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv", lpFilePart=0x0) returned 0x22 [0118.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0118.682] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\wx_kv3r.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.682] GetFileType (hFile=0x404) returned 0x1 [0118.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0118.683] GetFileType (hFile=0x404) returned 0x1 [0118.683] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe840 | out: lpFileSizeHigh=0x4fe840*=0x0) returned 0xe910 [0118.683] ReadFile (in: hFile=0x404, lpBuffer=0x24d5b90, nNumberOfBytesToRead=0xe910, lpNumberOfBytesRead=0x4fe7ec, lpOverlapped=0x0 | out: lpBuffer=0x24d5b90*, lpNumberOfBytesRead=0x4fe7ec*=0xe910, lpOverlapped=0x0) returned 1 [0118.684] CloseHandle (hObject=0x404) returned 1 [0118.716] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe304, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b8) returned 1 [0118.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe834 | out: lpFileInformation=0x4fe834*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7b4) returned 1 [0118.717] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv", nBufferLength=0x105, lpBuffer=0x4fe1ec, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv", lpFilePart=0x0) returned 0x22 [0118.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe730) returned 1 [0118.717] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\wx_kv3r.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.720] GetFileType (hFile=0x404) returned 0x1 [0118.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe72c) returned 1 [0118.720] GetFileType (hFile=0x404) returned 0x1 [0118.720] WriteFile (in: hFile=0x404, lpBuffer=0x254e4ec*, nNumberOfBytesToWrite=0xe920, lpNumberOfBytesWritten=0x4fe7e0, lpOverlapped=0x0 | out: lpBuffer=0x254e4ec*, lpNumberOfBytesWritten=0x4fe7e0*=0xe920, lpOverlapped=0x0) returned 1 [0118.723] CloseHandle (hObject=0x404) returned 1 [0118.726] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv", lpFilePart=0x0) returned 0x22 [0118.726] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv.klavins", nBufferLength=0x105, lpBuffer=0x4fe310, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv.klavins", lpFilePart=0x0) returned 0x2a [0118.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7c4) returned 1 [0118.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\wx_kv3r.mkv"), fInfoLevelId=0x0, lpFileInformation=0x4fe840 | out: lpFileInformation=0x4fe840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7112a860, ftCreationTime.dwHighDateTime=0x1d5ea02, ftLastAccessTime.dwLowDateTime=0xac8de60, ftLastAccessTime.dwHighDateTime=0x1d5e6d0, ftLastWriteTime.dwLowDateTime=0x88daee34, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xe920)) returned 1 [0118.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7c0) returned 1 [0118.726] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\wx_kv3r.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\Wx_Kv3R.mkv.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\wx_kv3r.mkv.klavins")) returned 1 [0118.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0118.728] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b", lpFilePart=0x0) returned 0x28 [0118.728] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ff81c0, ftCreationTime.dwHighDateTime=0x1d5ee6f, ftLastAccessTime.dwLowDateTime=0x12d643a0, ftLastAccessTime.dwHighDateTime=0x1d5edf5, ftLastWriteTime.dwLowDateTime=0x12d643a0, ftLastWriteTime.dwHighDateTime=0x1d5edf5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e1c0 [0118.728] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ff81c0, ftCreationTime.dwHighDateTime=0x1d5ee6f, ftLastAccessTime.dwLowDateTime=0x12d643a0, ftLastAccessTime.dwHighDateTime=0x1d5edf5, ftLastWriteTime.dwLowDateTime=0x12d643a0, ftLastWriteTime.dwHighDateTime=0x1d5edf5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.728] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b680c0, ftCreationTime.dwHighDateTime=0x1d5eb2d, ftLastAccessTime.dwLowDateTime=0xb58f00e0, ftLastAccessTime.dwHighDateTime=0x1d5e48c, ftLastWriteTime.dwLowDateTime=0xb58f00e0, ftLastWriteTime.dwHighDateTime=0x1d5e48c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="27Pk-PuvZPM", cAlternateFileName="27PK-P~1")) returned 1 [0118.729] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dabe270, ftCreationTime.dwHighDateTime=0x1d5eed8, ftLastAccessTime.dwLowDateTime=0xc64b6ca0, ftLastAccessTime.dwHighDateTime=0x1d5e7e0, ftLastWriteTime.dwLowDateTime=0xc64b6ca0, ftLastWriteTime.dwHighDateTime=0x1d5e7e0, nFileSizeHigh=0x0, nFileSizeLow=0x17de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="3USsS OB.swf", cAlternateFileName="3USSSO~1.SWF")) returned 1 [0118.729] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0abcc90, ftCreationTime.dwHighDateTime=0x1d5ec26, ftLastAccessTime.dwLowDateTime=0x7821af10, ftLastAccessTime.dwHighDateTime=0x1d5e4b3, ftLastWriteTime.dwLowDateTime=0x7821af10, ftLastWriteTime.dwHighDateTime=0x1d5e4b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="j-dNPr5d3JjQc75LvL", cAlternateFileName="J-DNPR~1")) returned 1 [0118.729] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7153f510, ftCreationTime.dwHighDateTime=0x1d5e389, ftLastAccessTime.dwLowDateTime=0xdb49bf80, ftLastAccessTime.dwHighDateTime=0x1d5e80d, ftLastWriteTime.dwLowDateTime=0xdb49bf80, ftLastWriteTime.dwHighDateTime=0x1d5e80d, nFileSizeHigh=0x0, nFileSizeLow=0x1765c, dwReserved0=0x0, dwReserved1=0x0, cFileName="muAGeWhYavWHMk.mkv", cAlternateFileName="MUAGEW~1.MKV")) returned 1 [0118.729] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20ee500, ftCreationTime.dwHighDateTime=0x1d5e4b8, ftLastAccessTime.dwLowDateTime=0x50459730, ftLastAccessTime.dwHighDateTime=0x1d5e48c, ftLastWriteTime.dwLowDateTime=0x50459730, ftLastWriteTime.dwHighDateTime=0x1d5e48c, nFileSizeHigh=0x0, nFileSizeLow=0x16d77, dwReserved0=0x0, dwReserved1=0x0, cFileName="xf2O1N.avi", cAlternateFileName="")) returned 1 [0118.729] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d8870, ftCreationTime.dwHighDateTime=0x1d5ef5d, ftLastAccessTime.dwLowDateTime=0x4dd7c300, ftLastAccessTime.dwHighDateTime=0x1d5e622, ftLastWriteTime.dwLowDateTime=0x4dd7c300, ftLastWriteTime.dwHighDateTime=0x1d5e622, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="xnvSTS8K1jN.mkv", cAlternateFileName="XNVSTS~1.MKV")) returned 1 [0118.730] FindNextFileW (in: hFindFile=0x77e1c0, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.730] FindClose (in: hFindFile=0x77e1c0 | out: hFindFile=0x77e1c0) returned 1 [0118.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0118.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0118.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe824) returned 1 [0118.730] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b", nBufferLength=0x105, lpBuffer=0x4fe2d8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b", lpFilePart=0x0) returned 0x28 [0118.730] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\*", lpFindFileData=0x4fe54c | out: lpFindFileData=0x4fe54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ff81c0, ftCreationTime.dwHighDateTime=0x1d5ee6f, ftLastAccessTime.dwLowDateTime=0x12d643a0, ftLastAccessTime.dwHighDateTime=0x1d5edf5, ftLastWriteTime.dwLowDateTime=0x12d643a0, ftLastWriteTime.dwHighDateTime=0x1d5edf5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dd80 [0118.730] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7ff81c0, ftCreationTime.dwHighDateTime=0x1d5ee6f, ftLastAccessTime.dwLowDateTime=0x12d643a0, ftLastAccessTime.dwHighDateTime=0x1d5edf5, ftLastWriteTime.dwLowDateTime=0x12d643a0, ftLastWriteTime.dwHighDateTime=0x1d5edf5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.731] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b680c0, ftCreationTime.dwHighDateTime=0x1d5eb2d, ftLastAccessTime.dwLowDateTime=0xb58f00e0, ftLastAccessTime.dwHighDateTime=0x1d5e48c, ftLastWriteTime.dwLowDateTime=0xb58f00e0, ftLastWriteTime.dwHighDateTime=0x1d5e48c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="27Pk-PuvZPM", cAlternateFileName="27PK-P~1")) returned 1 [0118.731] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dabe270, ftCreationTime.dwHighDateTime=0x1d5eed8, ftLastAccessTime.dwLowDateTime=0xc64b6ca0, ftLastAccessTime.dwHighDateTime=0x1d5e7e0, ftLastWriteTime.dwLowDateTime=0xc64b6ca0, ftLastWriteTime.dwHighDateTime=0x1d5e7e0, nFileSizeHigh=0x0, nFileSizeLow=0x17de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="3USsS OB.swf", cAlternateFileName="3USSSO~1.SWF")) returned 1 [0118.731] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0abcc90, ftCreationTime.dwHighDateTime=0x1d5ec26, ftLastAccessTime.dwLowDateTime=0x7821af10, ftLastAccessTime.dwHighDateTime=0x1d5e4b3, ftLastWriteTime.dwLowDateTime=0x7821af10, ftLastWriteTime.dwHighDateTime=0x1d5e4b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="j-dNPr5d3JjQc75LvL", cAlternateFileName="J-DNPR~1")) returned 1 [0118.731] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7153f510, ftCreationTime.dwHighDateTime=0x1d5e389, ftLastAccessTime.dwLowDateTime=0xdb49bf80, ftLastAccessTime.dwHighDateTime=0x1d5e80d, ftLastWriteTime.dwLowDateTime=0xdb49bf80, ftLastWriteTime.dwHighDateTime=0x1d5e80d, nFileSizeHigh=0x0, nFileSizeLow=0x1765c, dwReserved0=0x0, dwReserved1=0x0, cFileName="muAGeWhYavWHMk.mkv", cAlternateFileName="MUAGEW~1.MKV")) returned 1 [0118.731] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20ee500, ftCreationTime.dwHighDateTime=0x1d5e4b8, ftLastAccessTime.dwLowDateTime=0x50459730, ftLastAccessTime.dwHighDateTime=0x1d5e48c, ftLastWriteTime.dwLowDateTime=0x50459730, ftLastWriteTime.dwHighDateTime=0x1d5e48c, nFileSizeHigh=0x0, nFileSizeLow=0x16d77, dwReserved0=0x0, dwReserved1=0x0, cFileName="xf2O1N.avi", cAlternateFileName="")) returned 1 [0118.732] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d8870, ftCreationTime.dwHighDateTime=0x1d5ef5d, ftLastAccessTime.dwLowDateTime=0x4dd7c300, ftLastAccessTime.dwHighDateTime=0x1d5e622, ftLastWriteTime.dwLowDateTime=0x4dd7c300, ftLastWriteTime.dwHighDateTime=0x1d5e622, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="xnvSTS8K1jN.mkv", cAlternateFileName="XNVSTS~1.MKV")) returned 1 [0118.732] FindNextFileW (in: hFindFile=0x77dd80, lpFindFileData=0x4fe558 | out: lpFindFileData=0x4fe558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d8870, ftCreationTime.dwHighDateTime=0x1d5ef5d, ftLastAccessTime.dwLowDateTime=0x4dd7c300, ftLastAccessTime.dwHighDateTime=0x1d5e622, ftLastWriteTime.dwLowDateTime=0x4dd7c300, ftLastWriteTime.dwHighDateTime=0x1d5e622, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="xnvSTS8K1jN.mkv", cAlternateFileName="XNVSTS~1.MKV")) returned 0 [0118.732] FindClose (in: hFindFile=0x77dd80 | out: hFindFile=0x77dd80) returned 1 [0118.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7e0) returned 1 [0118.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe7ec) returned 1 [0118.732] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv", lpFilePart=0x0) returned 0x3b [0118.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0118.733] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\muagewhyavwhmk.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.733] GetFileType (hFile=0x404) returned 0x1 [0118.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0118.733] GetFileType (hFile=0x404) returned 0x1 [0118.733] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x1765c [0118.734] ReadFile (in: hFile=0x404, lpBuffer=0x3642d78, nNumberOfBytesToRead=0x1765c, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x3642d78*, lpNumberOfBytesRead=0x4fe778*=0x1765c, lpOverlapped=0x0) returned 1 [0118.738] CloseHandle (hObject=0x404) returned 1 [0118.787] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0118.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0118.787] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv", lpFilePart=0x0) returned 0x3b [0118.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0118.788] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\muagewhyavwhmk.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.790] GetFileType (hFile=0x404) returned 0x1 [0118.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0118.790] GetFileType (hFile=0x404) returned 0x1 [0118.790] WriteFile (in: hFile=0x404, lpBuffer=0x365a3f0*, nNumberOfBytesToWrite=0x17660, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x365a3f0*, lpNumberOfBytesWritten=0x4fe76c*=0x17660, lpOverlapped=0x0) returned 1 [0118.793] CloseHandle (hObject=0x404) returned 1 [0118.831] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv", lpFilePart=0x0) returned 0x3b [0118.831] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv.klavins", lpFilePart=0x0) returned 0x43 [0118.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0118.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\muagewhyavwhmk.mkv"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7153f510, ftCreationTime.dwHighDateTime=0x1d5e389, ftLastAccessTime.dwLowDateTime=0xdb49bf80, ftLastAccessTime.dwHighDateTime=0x1d5e80d, ftLastWriteTime.dwLowDateTime=0x88eb9f46, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x17660)) returned 1 [0118.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0118.831] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\muagewhyavwhmk.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\muAGeWhYavWHMk.mkv.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\muagewhyavwhmk.mkv.klavins")) returned 1 [0118.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi", lpFilePart=0x0) returned 0x33 [0118.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0118.832] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\xf2o1n.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.833] GetFileType (hFile=0x404) returned 0x1 [0118.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0118.833] GetFileType (hFile=0x404) returned 0x1 [0118.833] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x16d77 [0118.833] ReadFile (in: hFile=0x404, lpBuffer=0x3671a70, nNumberOfBytesToRead=0x16d77, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x3671a70*, lpNumberOfBytesRead=0x4fe778*=0x16d77, lpOverlapped=0x0) returned 1 [0118.835] CloseHandle (hObject=0x404) returned 1 [0118.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0118.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0118.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0118.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0118.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi", lpFilePart=0x0) returned 0x33 [0118.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0118.985] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\xf2o1n.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0118.989] GetFileType (hFile=0x404) returned 0x1 [0118.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0118.989] GetFileType (hFile=0x404) returned 0x1 [0118.989] WriteFile (in: hFile=0x404, lpBuffer=0x33fd068*, nNumberOfBytesToWrite=0x16d80, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x33fd068*, lpNumberOfBytesWritten=0x4fe76c*=0x16d80, lpOverlapped=0x0) returned 1 [0119.014] CloseHandle (hObject=0x404) returned 1 [0119.017] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi", lpFilePart=0x0) returned 0x33 [0119.017] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi.klavins", lpFilePart=0x0) returned 0x3b [0119.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0119.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\xf2o1n.avi"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20ee500, ftCreationTime.dwHighDateTime=0x1d5e4b8, ftLastAccessTime.dwLowDateTime=0x50459730, ftLastAccessTime.dwHighDateTime=0x1d5e48c, ftLastWriteTime.dwLowDateTime=0x89083a91, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x16d80)) returned 1 [0119.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0119.017] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\xf2o1n.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xf2O1N.avi.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\xf2o1n.avi.klavins")) returned 1 [0119.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv", nBufferLength=0x105, lpBuffer=0x4fe18c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv", lpFilePart=0x0) returned 0x38 [0119.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0119.018] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\xnvsts8k1jn.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.018] GetFileType (hFile=0x404) returned 0x1 [0119.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0119.018] GetFileType (hFile=0x404) returned 0x1 [0119.019] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe7cc | out: lpFileSizeHigh=0x4fe7cc*=0x0) returned 0x2994 [0119.019] ReadFile (in: hFile=0x404, lpBuffer=0x24011a4, nNumberOfBytesToRead=0x2994, lpNumberOfBytesRead=0x4fe778, lpOverlapped=0x0 | out: lpBuffer=0x24011a4*, lpNumberOfBytesRead=0x4fe778*=0x2994, lpOverlapped=0x0) returned 1 [0119.019] CloseHandle (hObject=0x404) returned 1 [0119.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe290, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe744) returned 1 [0119.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe7c0 | out: lpFileInformation=0x4fe7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe740) returned 1 [0119.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv", nBufferLength=0x105, lpBuffer=0x4fe178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv", lpFilePart=0x0) returned 0x38 [0119.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6bc) returned 1 [0119.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\xnvsts8k1jn.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.038] GetFileType (hFile=0x404) returned 0x1 [0119.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6b8) returned 1 [0119.038] GetFileType (hFile=0x404) returned 0x1 [0119.038] WriteFile (in: hFile=0x404, lpBuffer=0x245afac*, nNumberOfBytesToWrite=0x29a0, lpNumberOfBytesWritten=0x4fe76c, lpOverlapped=0x0 | out: lpBuffer=0x245afac*, lpNumberOfBytesWritten=0x4fe76c*=0x29a0, lpOverlapped=0x0) returned 1 [0119.039] CloseHandle (hObject=0x404) returned 1 [0119.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv", lpFilePart=0x0) returned 0x38 [0119.041] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv.klavins", nBufferLength=0x105, lpBuffer=0x4fe29c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv.klavins", lpFilePart=0x0) returned 0x40 [0119.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe750) returned 1 [0119.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\xnvsts8k1jn.mkv"), fInfoLevelId=0x0, lpFileInformation=0x4fe7cc | out: lpFileInformation=0x4fe7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d8870, ftCreationTime.dwHighDateTime=0x1d5ef5d, ftLastAccessTime.dwLowDateTime=0x4dd7c300, ftLastAccessTime.dwHighDateTime=0x1d5e622, ftLastWriteTime.dwLowDateTime=0x890a9d68, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x29a0)) returned 1 [0119.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe74c) returned 1 [0119.041] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\xnvsts8k1jn.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\xnvSTS8K1jN.mkv.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\xnvsts8k1jn.mkv.klavins")) returned 1 [0119.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b0) returned 1 [0119.042] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM", nBufferLength=0x105, lpBuffer=0x4fe264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM", lpFilePart=0x0) returned 0x34 [0119.042] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\*", lpFindFileData=0x4fe4d8 | out: lpFindFileData=0x4fe4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b680c0, ftCreationTime.dwHighDateTime=0x1d5eb2d, ftLastAccessTime.dwLowDateTime=0xb58f00e0, ftLastAccessTime.dwHighDateTime=0x1d5e48c, ftLastWriteTime.dwLowDateTime=0xb58f00e0, ftLastWriteTime.dwHighDateTime=0x1d5e48c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dcc0 [0119.042] FindNextFileW (in: hFindFile=0x77dcc0, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b680c0, ftCreationTime.dwHighDateTime=0x1d5eb2d, ftLastAccessTime.dwLowDateTime=0xb58f00e0, ftLastAccessTime.dwHighDateTime=0x1d5e48c, ftLastWriteTime.dwLowDateTime=0xb58f00e0, ftLastWriteTime.dwHighDateTime=0x1d5e48c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.042] FindNextFileW (in: hFindFile=0x77dcc0, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x700f4ea0, ftCreationTime.dwHighDateTime=0x1d5e5cf, ftLastAccessTime.dwLowDateTime=0x2041b6c0, ftLastAccessTime.dwHighDateTime=0x1d5ed03, ftLastWriteTime.dwLowDateTime=0x2041b6c0, ftLastWriteTime.dwHighDateTime=0x1d5ed03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QL0ZT2e_Y7ozGq8", cAlternateFileName="QL0ZT2~1")) returned 1 [0119.042] FindNextFileW (in: hFindFile=0x77dcc0, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3fce100, ftCreationTime.dwHighDateTime=0x1d5ecf0, ftLastAccessTime.dwLowDateTime=0xa6150320, ftLastAccessTime.dwHighDateTime=0x1d5ee10, ftLastWriteTime.dwLowDateTime=0xa6150320, ftLastWriteTime.dwHighDateTime=0x1d5ee10, nFileSizeHigh=0x0, nFileSizeLow=0x9d52, dwReserved0=0x0, dwReserved1=0x0, cFileName="VrUFB4O9EszBqKfX0FY.mp4", cAlternateFileName="VRUFB4~1.MP4")) returned 1 [0119.043] FindNextFileW (in: hFindFile=0x77dcc0, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.043] FindClose (in: hFindFile=0x77dcc0 | out: hFindFile=0x77dcc0) returned 1 [0119.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe76c) returned 1 [0119.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe778) returned 1 [0119.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b0) returned 1 [0119.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM", nBufferLength=0x105, lpBuffer=0x4fe264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM", lpFilePart=0x0) returned 0x34 [0119.043] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\*", lpFindFileData=0x4fe4d8 | out: lpFindFileData=0x4fe4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b680c0, ftCreationTime.dwHighDateTime=0x1d5eb2d, ftLastAccessTime.dwLowDateTime=0xb58f00e0, ftLastAccessTime.dwHighDateTime=0x1d5e48c, ftLastWriteTime.dwLowDateTime=0xb58f00e0, ftLastWriteTime.dwHighDateTime=0x1d5e48c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dc00 [0119.043] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b680c0, ftCreationTime.dwHighDateTime=0x1d5eb2d, ftLastAccessTime.dwLowDateTime=0xb58f00e0, ftLastAccessTime.dwHighDateTime=0x1d5e48c, ftLastWriteTime.dwLowDateTime=0xb58f00e0, ftLastWriteTime.dwHighDateTime=0x1d5e48c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.043] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x700f4ea0, ftCreationTime.dwHighDateTime=0x1d5e5cf, ftLastAccessTime.dwLowDateTime=0x2041b6c0, ftLastAccessTime.dwHighDateTime=0x1d5ed03, ftLastWriteTime.dwLowDateTime=0x2041b6c0, ftLastWriteTime.dwHighDateTime=0x1d5ed03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QL0ZT2e_Y7ozGq8", cAlternateFileName="QL0ZT2~1")) returned 1 [0119.044] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3fce100, ftCreationTime.dwHighDateTime=0x1d5ecf0, ftLastAccessTime.dwLowDateTime=0xa6150320, ftLastAccessTime.dwHighDateTime=0x1d5ee10, ftLastWriteTime.dwLowDateTime=0xa6150320, ftLastWriteTime.dwHighDateTime=0x1d5ee10, nFileSizeHigh=0x0, nFileSizeLow=0x9d52, dwReserved0=0x0, dwReserved1=0x0, cFileName="VrUFB4O9EszBqKfX0FY.mp4", cAlternateFileName="VRUFB4~1.MP4")) returned 1 [0119.044] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3fce100, ftCreationTime.dwHighDateTime=0x1d5ecf0, ftLastAccessTime.dwLowDateTime=0xa6150320, ftLastAccessTime.dwHighDateTime=0x1d5ee10, ftLastWriteTime.dwLowDateTime=0xa6150320, ftLastWriteTime.dwHighDateTime=0x1d5ee10, nFileSizeHigh=0x0, nFileSizeLow=0x9d52, dwReserved0=0x0, dwReserved1=0x0, cFileName="VrUFB4O9EszBqKfX0FY.mp4", cAlternateFileName="VRUFB4~1.MP4")) returned 0 [0119.044] FindClose (in: hFindFile=0x77dc00 | out: hFindFile=0x77dc00) returned 1 [0119.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe76c) returned 1 [0119.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe778) returned 1 [0119.044] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4", lpFilePart=0x0) returned 0x4c [0119.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0119.044] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\vrufb4o9eszbqkfx0fy.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.044] GetFileType (hFile=0x404) returned 0x1 [0119.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0119.044] GetFileType (hFile=0x404) returned 0x1 [0119.044] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x9d52 [0119.045] ReadFile (in: hFile=0x404, lpBuffer=0x245f55c, nNumberOfBytesToRead=0x9d52, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x245f55c*, lpNumberOfBytesRead=0x4fe704*=0x9d52, lpOverlapped=0x0) returned 1 [0119.046] CloseHandle (hObject=0x404) returned 1 [0119.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0119.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0119.063] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4", lpFilePart=0x0) returned 0x4c [0119.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0119.063] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\vrufb4o9eszbqkfx0fy.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.064] GetFileType (hFile=0x404) returned 0x1 [0119.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0119.064] GetFileType (hFile=0x404) returned 0x1 [0119.064] WriteFile (in: hFile=0x404, lpBuffer=0x24dd628*, nNumberOfBytesToWrite=0x9d60, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x24dd628*, lpNumberOfBytesWritten=0x4fe6f8*=0x9d60, lpOverlapped=0x0) returned 1 [0119.066] CloseHandle (hObject=0x404) returned 1 [0119.068] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4", lpFilePart=0x0) returned 0x4c [0119.068] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4.klavins", lpFilePart=0x0) returned 0x54 [0119.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0119.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\vrufb4o9eszbqkfx0fy.mp4"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3fce100, ftCreationTime.dwHighDateTime=0x1d5ecf0, ftLastAccessTime.dwLowDateTime=0xa6150320, ftLastAccessTime.dwHighDateTime=0x1d5ee10, ftLastWriteTime.dwLowDateTime=0x890f6155, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x9d60)) returned 1 [0119.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0119.068] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\vrufb4o9eszbqkfx0fy.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\VrUFB4O9EszBqKfX0FY.mp4.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\vrufb4o9eszbqkfx0fy.mp4.klavins")) returned 1 [0119.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0119.069] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8", lpFilePart=0x0) returned 0x44 [0119.069] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x700f4ea0, ftCreationTime.dwHighDateTime=0x1d5e5cf, ftLastAccessTime.dwLowDateTime=0x2041b6c0, ftLastAccessTime.dwHighDateTime=0x1d5ed03, ftLastWriteTime.dwLowDateTime=0x2041b6c0, ftLastWriteTime.dwHighDateTime=0x1d5ed03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e140 [0119.069] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x700f4ea0, ftCreationTime.dwHighDateTime=0x1d5e5cf, ftLastAccessTime.dwLowDateTime=0x2041b6c0, ftLastAccessTime.dwHighDateTime=0x1d5ed03, ftLastWriteTime.dwLowDateTime=0x2041b6c0, ftLastWriteTime.dwHighDateTime=0x1d5ed03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.069] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115a6380, ftCreationTime.dwHighDateTime=0x1d5f0de, ftLastAccessTime.dwLowDateTime=0x9a1dab60, ftLastAccessTime.dwHighDateTime=0x1d5eb7e, ftLastWriteTime.dwLowDateTime=0x9a1dab60, ftLastWriteTime.dwHighDateTime=0x1d5eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x17dde, dwReserved0=0x0, dwReserved1=0x0, cFileName="0hn-IH6hyLLR2eWJ.avi", cAlternateFileName="0HN-IH~1.AVI")) returned 1 [0119.070] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dcc49f0, ftCreationTime.dwHighDateTime=0x1d5e6e8, ftLastAccessTime.dwLowDateTime=0xc82cbee0, ftLastAccessTime.dwHighDateTime=0x1d5ea95, ftLastWriteTime.dwLowDateTime=0xc82cbee0, ftLastWriteTime.dwHighDateTime=0x1d5ea95, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EwAZIL02ki.avi", cAlternateFileName="EWAZIL~1.AVI")) returned 1 [0119.070] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74fc14f0, ftCreationTime.dwHighDateTime=0x1d5e58b, ftLastAccessTime.dwLowDateTime=0x6d3c8760, ftLastAccessTime.dwHighDateTime=0x1d5e2e1, ftLastWriteTime.dwLowDateTime=0x6d3c8760, ftLastWriteTime.dwHighDateTime=0x1d5e2e1, nFileSizeHigh=0x0, nFileSizeLow=0x1047a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ga-cc9eyoSy5YnCDWD6.mkv", cAlternateFileName="GA-CC9~1.MKV")) returned 1 [0119.070] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ac3460, ftCreationTime.dwHighDateTime=0x1d5e9df, ftLastAccessTime.dwLowDateTime=0x40b87610, ftLastAccessTime.dwHighDateTime=0x1d5e21c, ftLastWriteTime.dwLowDateTime=0x40b87610, ftLastWriteTime.dwHighDateTime=0x1d5e21c, nFileSizeHigh=0x0, nFileSizeLow=0xa3fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="oqtxWzF jYIrFO7.flv", cAlternateFileName="OQTXWZ~1.FLV")) returned 1 [0119.070] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511de4e0, ftCreationTime.dwHighDateTime=0x1d5ee47, ftLastAccessTime.dwLowDateTime=0xcf3b40d0, ftLastAccessTime.dwHighDateTime=0x1d5e57c, ftLastWriteTime.dwLowDateTime=0xcf3b40d0, ftLastWriteTime.dwHighDateTime=0x1d5e57c, nFileSizeHigh=0x0, nFileSizeLow=0xc21f, dwReserved0=0x0, dwReserved1=0x0, cFileName="x22Q.mp4", cAlternateFileName="")) returned 1 [0119.070] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6ceb5b0, ftCreationTime.dwHighDateTime=0x1d5ef9c, ftLastAccessTime.dwLowDateTime=0x831ce240, ftLastAccessTime.dwHighDateTime=0x1d5e6f2, ftLastWriteTime.dwLowDateTime=0x831ce240, ftLastWriteTime.dwHighDateTime=0x1d5e6f2, nFileSizeHigh=0x0, nFileSizeLow=0x14e03, dwReserved0=0x0, dwReserved1=0x0, cFileName="xd8Am.swf", cAlternateFileName="")) returned 1 [0119.070] FindNextFileW (in: hFindFile=0x77e140, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.070] FindClose (in: hFindFile=0x77e140 | out: hFindFile=0x77e140) returned 1 [0119.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0119.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0119.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0119.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8", lpFilePart=0x0) returned 0x44 [0119.071] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x700f4ea0, ftCreationTime.dwHighDateTime=0x1d5e5cf, ftLastAccessTime.dwLowDateTime=0x2041b6c0, ftLastAccessTime.dwHighDateTime=0x1d5ed03, ftLastWriteTime.dwLowDateTime=0x2041b6c0, ftLastWriteTime.dwHighDateTime=0x1d5ed03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dc00 [0119.071] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x700f4ea0, ftCreationTime.dwHighDateTime=0x1d5e5cf, ftLastAccessTime.dwLowDateTime=0x2041b6c0, ftLastAccessTime.dwHighDateTime=0x1d5ed03, ftLastWriteTime.dwLowDateTime=0x2041b6c0, ftLastWriteTime.dwHighDateTime=0x1d5ed03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.071] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115a6380, ftCreationTime.dwHighDateTime=0x1d5f0de, ftLastAccessTime.dwLowDateTime=0x9a1dab60, ftLastAccessTime.dwHighDateTime=0x1d5eb7e, ftLastWriteTime.dwLowDateTime=0x9a1dab60, ftLastWriteTime.dwHighDateTime=0x1d5eb7e, nFileSizeHigh=0x0, nFileSizeLow=0x17dde, dwReserved0=0x0, dwReserved1=0x0, cFileName="0hn-IH6hyLLR2eWJ.avi", cAlternateFileName="0HN-IH~1.AVI")) returned 1 [0119.071] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dcc49f0, ftCreationTime.dwHighDateTime=0x1d5e6e8, ftLastAccessTime.dwLowDateTime=0xc82cbee0, ftLastAccessTime.dwHighDateTime=0x1d5ea95, ftLastWriteTime.dwLowDateTime=0xc82cbee0, ftLastWriteTime.dwHighDateTime=0x1d5ea95, nFileSizeHigh=0x0, nFileSizeLow=0x3f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="EwAZIL02ki.avi", cAlternateFileName="EWAZIL~1.AVI")) returned 1 [0119.071] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74fc14f0, ftCreationTime.dwHighDateTime=0x1d5e58b, ftLastAccessTime.dwLowDateTime=0x6d3c8760, ftLastAccessTime.dwHighDateTime=0x1d5e2e1, ftLastWriteTime.dwLowDateTime=0x6d3c8760, ftLastWriteTime.dwHighDateTime=0x1d5e2e1, nFileSizeHigh=0x0, nFileSizeLow=0x1047a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ga-cc9eyoSy5YnCDWD6.mkv", cAlternateFileName="GA-CC9~1.MKV")) returned 1 [0119.072] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ac3460, ftCreationTime.dwHighDateTime=0x1d5e9df, ftLastAccessTime.dwLowDateTime=0x40b87610, ftLastAccessTime.dwHighDateTime=0x1d5e21c, ftLastWriteTime.dwLowDateTime=0x40b87610, ftLastWriteTime.dwHighDateTime=0x1d5e21c, nFileSizeHigh=0x0, nFileSizeLow=0xa3fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="oqtxWzF jYIrFO7.flv", cAlternateFileName="OQTXWZ~1.FLV")) returned 1 [0119.072] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511de4e0, ftCreationTime.dwHighDateTime=0x1d5ee47, ftLastAccessTime.dwLowDateTime=0xcf3b40d0, ftLastAccessTime.dwHighDateTime=0x1d5e57c, ftLastWriteTime.dwLowDateTime=0xcf3b40d0, ftLastWriteTime.dwHighDateTime=0x1d5e57c, nFileSizeHigh=0x0, nFileSizeLow=0xc21f, dwReserved0=0x0, dwReserved1=0x0, cFileName="x22Q.mp4", cAlternateFileName="")) returned 1 [0119.072] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6ceb5b0, ftCreationTime.dwHighDateTime=0x1d5ef9c, ftLastAccessTime.dwLowDateTime=0x831ce240, ftLastAccessTime.dwHighDateTime=0x1d5e6f2, ftLastWriteTime.dwLowDateTime=0x831ce240, ftLastWriteTime.dwHighDateTime=0x1d5e6f2, nFileSizeHigh=0x0, nFileSizeLow=0x14e03, dwReserved0=0x0, dwReserved1=0x0, cFileName="xd8Am.swf", cAlternateFileName="")) returned 1 [0119.072] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6ceb5b0, ftCreationTime.dwHighDateTime=0x1d5ef9c, ftLastAccessTime.dwLowDateTime=0x831ce240, ftLastAccessTime.dwHighDateTime=0x1d5e6f2, ftLastWriteTime.dwLowDateTime=0x831ce240, ftLastWriteTime.dwHighDateTime=0x1d5e6f2, nFileSizeHigh=0x0, nFileSizeLow=0x14e03, dwReserved0=0x0, dwReserved1=0x0, cFileName="xd8Am.swf", cAlternateFileName="")) returned 0 [0119.072] FindClose (in: hFindFile=0x77dc00 | out: hFindFile=0x77dc00) returned 1 [0119.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0119.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0119.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi", nBufferLength=0x105, lpBuffer=0x4fe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi", lpFilePart=0x0) returned 0x59 [0119.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0119.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\0hn-ih6hyllr2ewj.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.073] GetFileType (hFile=0x404) returned 0x1 [0119.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0119.073] GetFileType (hFile=0x404) returned 0x1 [0119.073] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe6e4 | out: lpFileSizeHigh=0x4fe6e4*=0x0) returned 0x17dde [0119.073] ReadFile (in: hFile=0x404, lpBuffer=0x3413e08, nNumberOfBytesToRead=0x17dde, lpNumberOfBytesRead=0x4fe690, lpOverlapped=0x0 | out: lpBuffer=0x3413e08*, lpNumberOfBytesRead=0x4fe690*=0x17dde, lpOverlapped=0x0) returned 1 [0119.074] CloseHandle (hObject=0x404) returned 1 [0119.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0119.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe6d8 | out: lpFileInformation=0x4fe6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0119.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi", nBufferLength=0x105, lpBuffer=0x4fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi", lpFilePart=0x0) returned 0x59 [0119.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5d4) returned 1 [0119.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\0hn-ih6hyllr2ewj.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.101] GetFileType (hFile=0x404) returned 0x1 [0119.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5d0) returned 1 [0119.101] GetFileType (hFile=0x404) returned 0x1 [0119.101] WriteFile (in: hFile=0x404, lpBuffer=0x348b3a8*, nNumberOfBytesToWrite=0x17de0, lpNumberOfBytesWritten=0x4fe684, lpOverlapped=0x0 | out: lpBuffer=0x348b3a8*, lpNumberOfBytesWritten=0x4fe684*=0x17de0, lpOverlapped=0x0) returned 1 [0119.104] CloseHandle (hObject=0x404) returned 1 [0119.107] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi", lpFilePart=0x0) returned 0x59 [0119.107] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi.klavins", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi.klavins", lpFilePart=0x0) returned 0x61 [0119.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe668) returned 1 [0119.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\0hn-ih6hyllr2ewj.avi"), fInfoLevelId=0x0, lpFileInformation=0x4fe6e4 | out: lpFileInformation=0x4fe6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115a6380, ftCreationTime.dwHighDateTime=0x1d5f0de, ftLastAccessTime.dwLowDateTime=0x9a1dab60, ftLastAccessTime.dwHighDateTime=0x1d5eb7e, ftLastWriteTime.dwLowDateTime=0x891426bb, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x17de0)) returned 1 [0119.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe664) returned 1 [0119.107] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\0hn-ih6hyllr2ewj.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\0hn-IH6hyLLR2eWJ.avi.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\0hn-ih6hyllr2ewj.avi.klavins")) returned 1 [0119.108] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi", nBufferLength=0x105, lpBuffer=0x4fe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi", lpFilePart=0x0) returned 0x53 [0119.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0119.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\ewazil02ki.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.108] GetFileType (hFile=0x404) returned 0x1 [0119.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0119.108] GetFileType (hFile=0x404) returned 0x1 [0119.108] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe6e4 | out: lpFileSizeHigh=0x4fe6e4*=0x0) returned 0x3f80 [0119.109] ReadFile (in: hFile=0x404, lpBuffer=0x25376f8, nNumberOfBytesToRead=0x3f80, lpNumberOfBytesRead=0x4fe690, lpOverlapped=0x0 | out: lpBuffer=0x25376f8*, lpNumberOfBytesRead=0x4fe690*=0x3f80, lpOverlapped=0x0) returned 1 [0119.109] CloseHandle (hObject=0x404) returned 1 [0119.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0119.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe6d8 | out: lpFileInformation=0x4fe6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0119.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi", nBufferLength=0x105, lpBuffer=0x4fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi", lpFilePart=0x0) returned 0x53 [0119.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5d4) returned 1 [0119.167] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\ewazil02ki.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.167] GetFileType (hFile=0x404) returned 0x1 [0119.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5d0) returned 1 [0119.167] GetFileType (hFile=0x404) returned 0x1 [0119.167] WriteFile (in: hFile=0x404, lpBuffer=0x25982b0*, nNumberOfBytesToWrite=0x3f90, lpNumberOfBytesWritten=0x4fe684, lpOverlapped=0x0 | out: lpBuffer=0x25982b0*, lpNumberOfBytesWritten=0x4fe684*=0x3f90, lpOverlapped=0x0) returned 1 [0119.168] CloseHandle (hObject=0x404) returned 1 [0119.170] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi", lpFilePart=0x0) returned 0x53 [0119.170] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi.klavins", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi.klavins", lpFilePart=0x0) returned 0x5b [0119.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe668) returned 1 [0119.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\ewazil02ki.avi"), fInfoLevelId=0x0, lpFileInformation=0x4fe6e4 | out: lpFileInformation=0x4fe6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dcc49f0, ftCreationTime.dwHighDateTime=0x1d5e6e8, ftLastAccessTime.dwLowDateTime=0xc82cbee0, ftLastAccessTime.dwHighDateTime=0x1d5ea95, ftLastWriteTime.dwLowDateTime=0x891daec9, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x3f90)) returned 1 [0119.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe664) returned 1 [0119.170] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\ewazil02ki.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\EwAZIL02ki.avi.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\ewazil02ki.avi.klavins")) returned 1 [0119.171] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv", nBufferLength=0x105, lpBuffer=0x4fe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv", lpFilePart=0x0) returned 0x5c [0119.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0119.171] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\ga-cc9eyosy5yncdwd6.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.171] GetFileType (hFile=0x404) returned 0x1 [0119.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0119.171] GetFileType (hFile=0x404) returned 0x1 [0119.171] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe6e4 | out: lpFileSizeHigh=0x4fe6e4*=0x0) returned 0x1047a [0119.171] ReadFile (in: hFile=0x404, lpBuffer=0x259c860, nNumberOfBytesToRead=0x1047a, lpNumberOfBytesRead=0x4fe690, lpOverlapped=0x0 | out: lpBuffer=0x259c860*, lpNumberOfBytesRead=0x4fe690*=0x1047a, lpOverlapped=0x0) returned 1 [0119.172] CloseHandle (hObject=0x404) returned 1 [0119.239] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0119.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe6d8 | out: lpFileInformation=0x4fe6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0119.240] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv", nBufferLength=0x105, lpBuffer=0x4fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv", lpFilePart=0x0) returned 0x5c [0119.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5d4) returned 1 [0119.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\ga-cc9eyosy5yncdwd6.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.242] GetFileType (hFile=0x404) returned 0x1 [0119.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5d0) returned 1 [0119.242] GetFileType (hFile=0x404) returned 0x1 [0119.242] WriteFile (in: hFile=0x404, lpBuffer=0x242b72c*, nNumberOfBytesToWrite=0x10480, lpNumberOfBytesWritten=0x4fe684, lpOverlapped=0x0 | out: lpBuffer=0x242b72c*, lpNumberOfBytesWritten=0x4fe684*=0x10480, lpOverlapped=0x0) returned 1 [0119.244] CloseHandle (hObject=0x404) returned 1 [0119.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv", lpFilePart=0x0) returned 0x5c [0119.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv.klavins", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv.klavins", lpFilePart=0x0) returned 0x64 [0119.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe668) returned 1 [0119.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\ga-cc9eyosy5yncdwd6.mkv"), fInfoLevelId=0x0, lpFileInformation=0x4fe6e4 | out: lpFileInformation=0x4fe6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74fc14f0, ftCreationTime.dwHighDateTime=0x1d5e58b, ftLastAccessTime.dwLowDateTime=0x6d3c8760, ftLastAccessTime.dwHighDateTime=0x1d5e2e1, ftLastWriteTime.dwLowDateTime=0x89299a40, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x10480)) returned 1 [0119.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe664) returned 1 [0119.247] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\ga-cc9eyosy5yncdwd6.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\ga-cc9eyoSy5YnCDWD6.mkv.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\ga-cc9eyosy5yncdwd6.mkv.klavins")) returned 1 [0119.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4", nBufferLength=0x105, lpBuffer=0x4fe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4", lpFilePart=0x0) returned 0x4d [0119.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0119.248] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\x22q.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.248] GetFileType (hFile=0x404) returned 0x1 [0119.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0119.249] GetFileType (hFile=0x404) returned 0x1 [0119.249] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe6e4 | out: lpFileSizeHigh=0x4fe6e4*=0x0) returned 0xc21f [0119.249] ReadFile (in: hFile=0x404, lpBuffer=0x243c208, nNumberOfBytesToRead=0xc21f, lpNumberOfBytesRead=0x4fe690, lpOverlapped=0x0 | out: lpBuffer=0x243c208*, lpNumberOfBytesRead=0x4fe690*=0xc21f, lpOverlapped=0x0) returned 1 [0119.264] CloseHandle (hObject=0x404) returned 1 [0119.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0119.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe6d8 | out: lpFileInformation=0x4fe6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0119.292] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4", nBufferLength=0x105, lpBuffer=0x4fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4", lpFilePart=0x0) returned 0x4d [0119.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5d4) returned 1 [0119.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\x22q.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.294] GetFileType (hFile=0x404) returned 0x1 [0119.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5d0) returned 1 [0119.294] GetFileType (hFile=0x404) returned 0x1 [0119.294] WriteFile (in: hFile=0x404, lpBuffer=0x24ad7c4*, nNumberOfBytesToWrite=0xc220, lpNumberOfBytesWritten=0x4fe684, lpOverlapped=0x0 | out: lpBuffer=0x24ad7c4*, lpNumberOfBytesWritten=0x4fe684*=0xc220, lpOverlapped=0x0) returned 1 [0119.298] CloseHandle (hObject=0x404) returned 1 [0119.306] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4", lpFilePart=0x0) returned 0x4d [0119.306] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4.klavins", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4.klavins", lpFilePart=0x0) returned 0x55 [0119.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe668) returned 1 [0119.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\x22q.mp4"), fInfoLevelId=0x0, lpFileInformation=0x4fe6e4 | out: lpFileInformation=0x4fe6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511de4e0, ftCreationTime.dwHighDateTime=0x1d5ee47, ftLastAccessTime.dwLowDateTime=0xcf3b40d0, ftLastAccessTime.dwHighDateTime=0x1d5e57c, ftLastWriteTime.dwLowDateTime=0x89323ca6, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xc220)) returned 1 [0119.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe664) returned 1 [0119.306] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\x22q.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\27Pk-PuvZPM\\QL0ZT2e_Y7ozGq8\\x22Q.mp4.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\27pk-puvzpm\\ql0zt2e_y7ozgq8\\x22q.mp4.klavins")) returned 1 [0119.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b0) returned 1 [0119.307] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL", nBufferLength=0x105, lpBuffer=0x4fe264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL", lpFilePart=0x0) returned 0x3b [0119.307] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\*", lpFindFileData=0x4fe4d8 | out: lpFindFileData=0x4fe4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0abcc90, ftCreationTime.dwHighDateTime=0x1d5ec26, ftLastAccessTime.dwLowDateTime=0x7821af10, ftLastAccessTime.dwHighDateTime=0x1d5e4b3, ftLastWriteTime.dwLowDateTime=0x7821af10, ftLastWriteTime.dwHighDateTime=0x1d5e4b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e180 [0119.307] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0abcc90, ftCreationTime.dwHighDateTime=0x1d5ec26, ftLastAccessTime.dwLowDateTime=0x7821af10, ftLastAccessTime.dwHighDateTime=0x1d5e4b3, ftLastWriteTime.dwLowDateTime=0x7821af10, ftLastWriteTime.dwHighDateTime=0x1d5e4b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.308] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3a63a0, ftCreationTime.dwHighDateTime=0x1d5ef20, ftLastAccessTime.dwLowDateTime=0x3be9bfc0, ftLastAccessTime.dwHighDateTime=0x1d5efed, ftLastWriteTime.dwLowDateTime=0x3be9bfc0, ftLastWriteTime.dwHighDateTime=0x1d5efed, nFileSizeHigh=0x0, nFileSizeLow=0x6932, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nq1ciG2EUE.avi", cAlternateFileName="7NQ1CI~1.AVI")) returned 1 [0119.308] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd03454f0, ftCreationTime.dwHighDateTime=0x1d5ed1e, ftLastAccessTime.dwLowDateTime=0x8c170140, ftLastAccessTime.dwHighDateTime=0x1d5e37e, ftLastWriteTime.dwLowDateTime=0x8c170140, ftLastWriteTime.dwHighDateTime=0x1d5e37e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EzLrLSlA1TZf8Z", cAlternateFileName="EZLRLS~1")) returned 1 [0119.308] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa39db0, ftCreationTime.dwHighDateTime=0x1d5e44c, ftLastAccessTime.dwLowDateTime=0x94816e30, ftLastAccessTime.dwHighDateTime=0x1d5e930, ftLastWriteTime.dwLowDateTime=0x94816e30, ftLastWriteTime.dwHighDateTime=0x1d5e930, nFileSizeHigh=0x0, nFileSizeLow=0x3ad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fqe_Q8EbR5Z0D83U.flv", cAlternateFileName="FQE_Q8~1.FLV")) returned 1 [0119.308] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdadb3670, ftCreationTime.dwHighDateTime=0x1d5f035, ftLastAccessTime.dwLowDateTime=0x224d3450, ftLastAccessTime.dwHighDateTime=0x1d5e225, ftLastWriteTime.dwLowDateTime=0x224d3450, ftLastWriteTime.dwHighDateTime=0x1d5e225, nFileSizeHigh=0x0, nFileSizeLow=0x13b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NN07eaIQk.mkv", cAlternateFileName="NN07EA~1.MKV")) returned 1 [0119.308] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fcb6520, ftCreationTime.dwHighDateTime=0x1d5f026, ftLastAccessTime.dwLowDateTime=0xde82dd20, ftLastAccessTime.dwHighDateTime=0x1d5e89f, ftLastWriteTime.dwLowDateTime=0xde82dd20, ftLastWriteTime.dwHighDateTime=0x1d5e89f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xFxdc", cAlternateFileName="")) returned 1 [0119.308] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fcb6520, ftCreationTime.dwHighDateTime=0x1d5f026, ftLastAccessTime.dwLowDateTime=0xde82dd20, ftLastAccessTime.dwHighDateTime=0x1d5e89f, ftLastWriteTime.dwLowDateTime=0xde82dd20, ftLastWriteTime.dwHighDateTime=0x1d5e89f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xFxdc", cAlternateFileName="")) returned 0 [0119.309] FindClose (in: hFindFile=0x77e180 | out: hFindFile=0x77e180) returned 1 [0119.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe76c) returned 1 [0119.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe778) returned 1 [0119.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe7b0) returned 1 [0119.309] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL", nBufferLength=0x105, lpBuffer=0x4fe264, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL", lpFilePart=0x0) returned 0x3b [0119.309] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\*", lpFindFileData=0x4fe4d8 | out: lpFindFileData=0x4fe4d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0abcc90, ftCreationTime.dwHighDateTime=0x1d5ec26, ftLastAccessTime.dwLowDateTime=0x7821af10, ftLastAccessTime.dwHighDateTime=0x1d5e4b3, ftLastWriteTime.dwLowDateTime=0x7821af10, ftLastWriteTime.dwHighDateTime=0x1d5e4b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77dc00 [0119.309] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0abcc90, ftCreationTime.dwHighDateTime=0x1d5ec26, ftLastAccessTime.dwLowDateTime=0x7821af10, ftLastAccessTime.dwHighDateTime=0x1d5e4b3, ftLastWriteTime.dwLowDateTime=0x7821af10, ftLastWriteTime.dwHighDateTime=0x1d5e4b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.309] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3a63a0, ftCreationTime.dwHighDateTime=0x1d5ef20, ftLastAccessTime.dwLowDateTime=0x3be9bfc0, ftLastAccessTime.dwHighDateTime=0x1d5efed, ftLastWriteTime.dwLowDateTime=0x3be9bfc0, ftLastWriteTime.dwHighDateTime=0x1d5efed, nFileSizeHigh=0x0, nFileSizeLow=0x6932, dwReserved0=0x0, dwReserved1=0x0, cFileName="7nq1ciG2EUE.avi", cAlternateFileName="7NQ1CI~1.AVI")) returned 1 [0119.309] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd03454f0, ftCreationTime.dwHighDateTime=0x1d5ed1e, ftLastAccessTime.dwLowDateTime=0x8c170140, ftLastAccessTime.dwHighDateTime=0x1d5e37e, ftLastWriteTime.dwLowDateTime=0x8c170140, ftLastWriteTime.dwHighDateTime=0x1d5e37e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EzLrLSlA1TZf8Z", cAlternateFileName="EZLRLS~1")) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaa39db0, ftCreationTime.dwHighDateTime=0x1d5e44c, ftLastAccessTime.dwLowDateTime=0x94816e30, ftLastAccessTime.dwHighDateTime=0x1d5e930, ftLastWriteTime.dwLowDateTime=0x94816e30, ftLastWriteTime.dwHighDateTime=0x1d5e930, nFileSizeHigh=0x0, nFileSizeLow=0x3ad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fqe_Q8EbR5Z0D83U.flv", cAlternateFileName="FQE_Q8~1.FLV")) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdadb3670, ftCreationTime.dwHighDateTime=0x1d5f035, ftLastAccessTime.dwLowDateTime=0x224d3450, ftLastAccessTime.dwHighDateTime=0x1d5e225, ftLastWriteTime.dwLowDateTime=0x224d3450, ftLastWriteTime.dwHighDateTime=0x1d5e225, nFileSizeHigh=0x0, nFileSizeLow=0x13b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="NN07eaIQk.mkv", cAlternateFileName="NN07EA~1.MKV")) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fcb6520, ftCreationTime.dwHighDateTime=0x1d5f026, ftLastAccessTime.dwLowDateTime=0xde82dd20, ftLastAccessTime.dwHighDateTime=0x1d5e89f, ftLastWriteTime.dwLowDateTime=0xde82dd20, ftLastWriteTime.dwHighDateTime=0x1d5e89f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xFxdc", cAlternateFileName="")) returned 1 [0119.310] FindNextFileW (in: hFindFile=0x77dc00, lpFindFileData=0x4fe4e4 | out: lpFindFileData=0x4fe4e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.310] FindClose (in: hFindFile=0x77dc00 | out: hFindFile=0x77dc00) returned 1 [0119.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe76c) returned 1 [0119.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe778) returned 1 [0119.311] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi", lpFilePart=0x0) returned 0x4b [0119.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0119.311] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\7nq1cig2eue.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.311] GetFileType (hFile=0x404) returned 0x1 [0119.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0119.311] GetFileType (hFile=0x404) returned 0x1 [0119.311] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x6932 [0119.311] ReadFile (in: hFile=0x404, lpBuffer=0x24bc1a0, nNumberOfBytesToRead=0x6932, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x24bc1a0*, lpNumberOfBytesRead=0x4fe704*=0x6932, lpOverlapped=0x0) returned 1 [0119.313] CloseHandle (hObject=0x404) returned 1 [0119.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0119.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0119.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi", lpFilePart=0x0) returned 0x4b [0119.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0119.332] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\7nq1cig2eue.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.334] GetFileType (hFile=0x404) returned 0x1 [0119.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0119.334] GetFileType (hFile=0x404) returned 0x1 [0119.334] WriteFile (in: hFile=0x404, lpBuffer=0x2529dcc*, nNumberOfBytesToWrite=0x6940, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x2529dcc*, lpNumberOfBytesWritten=0x4fe6f8*=0x6940, lpOverlapped=0x0) returned 1 [0119.348] CloseHandle (hObject=0x404) returned 1 [0119.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi", lpFilePart=0x0) returned 0x4b [0119.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi.klavins", lpFilePart=0x0) returned 0x53 [0119.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0119.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\7nq1cig2eue.avi"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3a63a0, ftCreationTime.dwHighDateTime=0x1d5ef20, ftLastAccessTime.dwLowDateTime=0x3be9bfc0, ftLastAccessTime.dwHighDateTime=0x1d5efed, ftLastWriteTime.dwLowDateTime=0x8939677b, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x6940)) returned 1 [0119.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0119.351] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\7nq1cig2eue.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\7nq1ciG2EUE.avi.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\7nq1cig2eue.avi.klavins")) returned 1 [0119.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv", nBufferLength=0x105, lpBuffer=0x4fe118, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv", lpFilePart=0x0) returned 0x49 [0119.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0119.352] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\nn07eaiqk.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.352] GetFileType (hFile=0x404) returned 0x1 [0119.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0119.352] GetFileType (hFile=0x404) returned 0x1 [0119.352] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe758 | out: lpFileSizeHigh=0x4fe758*=0x0) returned 0x13b38 [0119.352] ReadFile (in: hFile=0x404, lpBuffer=0x2530cc8, nNumberOfBytesToRead=0x13b38, lpNumberOfBytesRead=0x4fe704, lpOverlapped=0x0 | out: lpBuffer=0x2530cc8*, lpNumberOfBytesRead=0x4fe704*=0x13b38, lpOverlapped=0x0) returned 1 [0119.354] CloseHandle (hObject=0x404) returned 1 [0119.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe21c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6d0) returned 1 [0119.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe74c | out: lpFileInformation=0x4fe74c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6cc) returned 1 [0119.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv", nBufferLength=0x105, lpBuffer=0x4fe104, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv", lpFilePart=0x0) returned 0x49 [0119.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe648) returned 1 [0119.390] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\nn07eaiqk.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.392] GetFileType (hFile=0x404) returned 0x1 [0119.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe644) returned 1 [0119.392] GetFileType (hFile=0x404) returned 0x1 [0119.392] WriteFile (in: hFile=0x404, lpBuffer=0x25b8c84*, nNumberOfBytesToWrite=0x13b40, lpNumberOfBytesWritten=0x4fe6f8, lpOverlapped=0x0 | out: lpBuffer=0x25b8c84*, lpNumberOfBytesWritten=0x4fe6f8*=0x13b40, lpOverlapped=0x0) returned 1 [0119.395] CloseHandle (hObject=0x404) returned 1 [0119.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv", lpFilePart=0x0) returned 0x49 [0119.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv.klavins", nBufferLength=0x105, lpBuffer=0x4fe228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv.klavins", lpFilePart=0x0) returned 0x51 [0119.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6dc) returned 1 [0119.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\nn07eaiqk.mkv"), fInfoLevelId=0x0, lpFileInformation=0x4fe758 | out: lpFileInformation=0x4fe758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdadb3670, ftCreationTime.dwHighDateTime=0x1d5f035, ftLastAccessTime.dwLowDateTime=0x224d3450, ftLastAccessTime.dwHighDateTime=0x1d5e225, ftLastWriteTime.dwLowDateTime=0x89408dd1, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x13b40)) returned 1 [0119.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6d8) returned 1 [0119.399] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\nn07eaiqk.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\NN07eaIQk.mkv.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\nn07eaiqk.mkv.klavins")) returned 1 [0119.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0119.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z", lpFilePart=0x0) returned 0x4a [0119.401] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd03454f0, ftCreationTime.dwHighDateTime=0x1d5ed1e, ftLastAccessTime.dwLowDateTime=0x8c170140, ftLastAccessTime.dwHighDateTime=0x1d5e37e, ftLastWriteTime.dwLowDateTime=0x8c170140, ftLastWriteTime.dwHighDateTime=0x1d5e37e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e180 [0119.401] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd03454f0, ftCreationTime.dwHighDateTime=0x1d5ed1e, ftLastAccessTime.dwLowDateTime=0x8c170140, ftLastAccessTime.dwHighDateTime=0x1d5e37e, ftLastWriteTime.dwLowDateTime=0x8c170140, ftLastWriteTime.dwHighDateTime=0x1d5e37e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.402] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6745bd30, ftCreationTime.dwHighDateTime=0x1d5e2fb, ftLastAccessTime.dwLowDateTime=0xc3748330, ftLastAccessTime.dwHighDateTime=0x1d5f015, ftLastWriteTime.dwLowDateTime=0xc3748330, ftLastWriteTime.dwHighDateTime=0x1d5f015, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1KHIKa", cAlternateFileName="")) returned 1 [0119.402] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1cc4f0, ftCreationTime.dwHighDateTime=0x1d5e58b, ftLastAccessTime.dwLowDateTime=0x74d037c0, ftLastAccessTime.dwHighDateTime=0x1d5e961, ftLastWriteTime.dwLowDateTime=0x74d037c0, ftLastWriteTime.dwHighDateTime=0x1d5e961, nFileSizeHigh=0x0, nFileSizeLow=0xa23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9-vMHkBEUJb5v.mp4", cAlternateFileName="9-VMHK~1.MP4")) returned 1 [0119.402] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f50f90, ftCreationTime.dwHighDateTime=0x1d5e121, ftLastAccessTime.dwLowDateTime=0x45c0aae0, ftLastAccessTime.dwHighDateTime=0x1d5e19c, ftLastWriteTime.dwLowDateTime=0x45c0aae0, ftLastWriteTime.dwHighDateTime=0x1d5e19c, nFileSizeHigh=0x0, nFileSizeLow=0x15a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="aikBLF6BI26sgMMD.mkv", cAlternateFileName="AIKBLF~1.MKV")) returned 1 [0119.402] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4983e20, ftCreationTime.dwHighDateTime=0x1d5e831, ftLastAccessTime.dwLowDateTime=0xe456f810, ftLastAccessTime.dwHighDateTime=0x1d5ec3e, ftLastWriteTime.dwLowDateTime=0xe456f810, ftLastWriteTime.dwHighDateTime=0x1d5ec3e, nFileSizeHigh=0x0, nFileSizeLow=0xe64f, dwReserved0=0x0, dwReserved1=0x0, cFileName="vRSX.avi", cAlternateFileName="")) returned 1 [0119.402] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90df7ba0, ftCreationTime.dwHighDateTime=0x1d5e3c7, ftLastAccessTime.dwLowDateTime=0xe3dbd670, ftLastAccessTime.dwHighDateTime=0x1d5ec03, ftLastWriteTime.dwLowDateTime=0xe3dbd670, ftLastWriteTime.dwHighDateTime=0x1d5ec03, nFileSizeHigh=0x0, nFileSizeLow=0xcc99, dwReserved0=0x0, dwReserved1=0x0, cFileName="YyEynaG2P74epb5NDJh.flv", cAlternateFileName="YYEYNA~1.FLV")) returned 1 [0119.403] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4507250, ftCreationTime.dwHighDateTime=0x1d5ea4a, ftLastAccessTime.dwLowDateTime=0x3c2549d0, ftLastAccessTime.dwHighDateTime=0x1d5ec16, ftLastWriteTime.dwLowDateTime=0x3c2549d0, ftLastWriteTime.dwHighDateTime=0x1d5ec16, nFileSizeHigh=0x0, nFileSizeLow=0xe028, dwReserved0=0x0, dwReserved1=0x0, cFileName="zRVHl63h5PLPFY.swf", cAlternateFileName="ZRVHL6~1.SWF")) returned 1 [0119.403] FindNextFileW (in: hFindFile=0x77e180, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.403] FindClose (in: hFindFile=0x77e180 | out: hFindFile=0x77e180) returned 1 [0119.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0119.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0119.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0119.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z", lpFilePart=0x0) returned 0x4a [0119.415] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd03454f0, ftCreationTime.dwHighDateTime=0x1d5ed1e, ftLastAccessTime.dwLowDateTime=0x8c170140, ftLastAccessTime.dwHighDateTime=0x1d5e37e, ftLastWriteTime.dwLowDateTime=0x8c170140, ftLastWriteTime.dwHighDateTime=0x1d5e37e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e000 [0119.415] FindNextFileW (in: hFindFile=0x77e000, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd03454f0, ftCreationTime.dwHighDateTime=0x1d5ed1e, ftLastAccessTime.dwLowDateTime=0x8c170140, ftLastAccessTime.dwHighDateTime=0x1d5e37e, ftLastWriteTime.dwLowDateTime=0x8c170140, ftLastWriteTime.dwHighDateTime=0x1d5e37e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x77e000, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6745bd30, ftCreationTime.dwHighDateTime=0x1d5e2fb, ftLastAccessTime.dwLowDateTime=0xc3748330, ftLastAccessTime.dwHighDateTime=0x1d5f015, ftLastWriteTime.dwLowDateTime=0xc3748330, ftLastWriteTime.dwHighDateTime=0x1d5f015, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1KHIKa", cAlternateFileName="")) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x77e000, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1cc4f0, ftCreationTime.dwHighDateTime=0x1d5e58b, ftLastAccessTime.dwLowDateTime=0x74d037c0, ftLastAccessTime.dwHighDateTime=0x1d5e961, ftLastWriteTime.dwLowDateTime=0x74d037c0, ftLastWriteTime.dwHighDateTime=0x1d5e961, nFileSizeHigh=0x0, nFileSizeLow=0xa23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9-vMHkBEUJb5v.mp4", cAlternateFileName="9-VMHK~1.MP4")) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x77e000, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f50f90, ftCreationTime.dwHighDateTime=0x1d5e121, ftLastAccessTime.dwLowDateTime=0x45c0aae0, ftLastAccessTime.dwHighDateTime=0x1d5e19c, ftLastWriteTime.dwLowDateTime=0x45c0aae0, ftLastWriteTime.dwHighDateTime=0x1d5e19c, nFileSizeHigh=0x0, nFileSizeLow=0x15a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="aikBLF6BI26sgMMD.mkv", cAlternateFileName="AIKBLF~1.MKV")) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x77e000, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4983e20, ftCreationTime.dwHighDateTime=0x1d5e831, ftLastAccessTime.dwLowDateTime=0xe456f810, ftLastAccessTime.dwHighDateTime=0x1d5ec3e, ftLastWriteTime.dwLowDateTime=0xe456f810, ftLastWriteTime.dwHighDateTime=0x1d5ec3e, nFileSizeHigh=0x0, nFileSizeLow=0xe64f, dwReserved0=0x0, dwReserved1=0x0, cFileName="vRSX.avi", cAlternateFileName="")) returned 1 [0119.416] FindNextFileW (in: hFindFile=0x77e000, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90df7ba0, ftCreationTime.dwHighDateTime=0x1d5e3c7, ftLastAccessTime.dwLowDateTime=0xe3dbd670, ftLastAccessTime.dwHighDateTime=0x1d5ec03, ftLastWriteTime.dwLowDateTime=0xe3dbd670, ftLastWriteTime.dwHighDateTime=0x1d5ec03, nFileSizeHigh=0x0, nFileSizeLow=0xcc99, dwReserved0=0x0, dwReserved1=0x0, cFileName="YyEynaG2P74epb5NDJh.flv", cAlternateFileName="YYEYNA~1.FLV")) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x77e000, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4507250, ftCreationTime.dwHighDateTime=0x1d5ea4a, ftLastAccessTime.dwLowDateTime=0x3c2549d0, ftLastAccessTime.dwHighDateTime=0x1d5ec16, ftLastWriteTime.dwLowDateTime=0x3c2549d0, ftLastWriteTime.dwHighDateTime=0x1d5ec16, nFileSizeHigh=0x0, nFileSizeLow=0xe028, dwReserved0=0x0, dwReserved1=0x0, cFileName="zRVHl63h5PLPFY.swf", cAlternateFileName="ZRVHL6~1.SWF")) returned 1 [0119.417] FindNextFileW (in: hFindFile=0x77e000, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4507250, ftCreationTime.dwHighDateTime=0x1d5ea4a, ftLastAccessTime.dwLowDateTime=0x3c2549d0, ftLastAccessTime.dwHighDateTime=0x1d5ec16, ftLastWriteTime.dwLowDateTime=0x3c2549d0, ftLastWriteTime.dwHighDateTime=0x1d5ec16, nFileSizeHigh=0x0, nFileSizeLow=0xe028, dwReserved0=0x0, dwReserved1=0x0, cFileName="zRVHl63h5PLPFY.swf", cAlternateFileName="ZRVHL6~1.SWF")) returned 0 [0119.417] FindClose (in: hFindFile=0x77e000 | out: hFindFile=0x77e000) returned 1 [0119.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0119.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0119.418] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4", nBufferLength=0x105, lpBuffer=0x4fe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4", lpFilePart=0x0) returned 0x5c [0119.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0119.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\9-vmhkbeujb5v.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.418] GetFileType (hFile=0x404) returned 0x1 [0119.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0119.418] GetFileType (hFile=0x404) returned 0x1 [0119.418] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe6e4 | out: lpFileSizeHigh=0x4fe6e4*=0x0) returned 0xa23c [0119.418] ReadFile (in: hFile=0x404, lpBuffer=0x23c6bb4, nNumberOfBytesToRead=0xa23c, lpNumberOfBytesRead=0x4fe690, lpOverlapped=0x0 | out: lpBuffer=0x23c6bb4*, lpNumberOfBytesRead=0x4fe690*=0xa23c, lpOverlapped=0x0) returned 1 [0119.420] CloseHandle (hObject=0x404) returned 1 [0119.496] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0119.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe6d8 | out: lpFileInformation=0x4fe6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0119.497] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4", nBufferLength=0x105, lpBuffer=0x4fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4", lpFilePart=0x0) returned 0x5c [0119.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5d4) returned 1 [0119.497] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\9-vmhkbeujb5v.mp4"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.498] GetFileType (hFile=0x404) returned 0x1 [0119.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5d0) returned 1 [0119.498] GetFileType (hFile=0x404) returned 0x1 [0119.498] WriteFile (in: hFile=0x404, lpBuffer=0x2446638*, nNumberOfBytesToWrite=0xa240, lpNumberOfBytesWritten=0x4fe684, lpOverlapped=0x0 | out: lpBuffer=0x2446638*, lpNumberOfBytesWritten=0x4fe684*=0xa240, lpOverlapped=0x0) returned 1 [0119.500] CloseHandle (hObject=0x404) returned 1 [0119.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4", lpFilePart=0x0) returned 0x5c [0119.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4.klavins", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4.klavins", lpFilePart=0x0) returned 0x64 [0119.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe668) returned 1 [0119.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\9-vmhkbeujb5v.mp4"), fInfoLevelId=0x0, lpFileInformation=0x4fe6e4 | out: lpFileInformation=0x4fe6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1cc4f0, ftCreationTime.dwHighDateTime=0x1d5e58b, ftLastAccessTime.dwLowDateTime=0x74d037c0, ftLastAccessTime.dwHighDateTime=0x1d5e961, ftLastWriteTime.dwLowDateTime=0x89513f16, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xa240)) returned 1 [0119.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe664) returned 1 [0119.506] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\9-vmhkbeujb5v.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\9-vMHkBEUJb5v.mp4.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\9-vmhkbeujb5v.mp4.klavins")) returned 1 [0119.507] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv", nBufferLength=0x105, lpBuffer=0x4fe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv", lpFilePart=0x0) returned 0x5f [0119.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0119.507] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\aikblf6bi26sgmmd.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.507] GetFileType (hFile=0x404) returned 0x1 [0119.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0119.507] GetFileType (hFile=0x404) returned 0x1 [0119.507] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe6e4 | out: lpFileSizeHigh=0x4fe6e4*=0x0) returned 0x15a68 [0119.508] ReadFile (in: hFile=0x404, lpBuffer=0x3503568, nNumberOfBytesToRead=0x15a68, lpNumberOfBytesRead=0x4fe690, lpOverlapped=0x0 | out: lpBuffer=0x3503568*, lpNumberOfBytesRead=0x4fe690*=0x15a68, lpOverlapped=0x0) returned 1 [0119.510] CloseHandle (hObject=0x404) returned 1 [0119.532] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0119.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe6d8 | out: lpFileInformation=0x4fe6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0119.533] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv", nBufferLength=0x105, lpBuffer=0x4fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv", lpFilePart=0x0) returned 0x5f [0119.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5d4) returned 1 [0119.533] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\aikblf6bi26sgmmd.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.534] GetFileType (hFile=0x404) returned 0x1 [0119.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5d0) returned 1 [0119.535] GetFileType (hFile=0x404) returned 0x1 [0119.535] WriteFile (in: hFile=0x404, lpBuffer=0x356f9d0*, nNumberOfBytesToWrite=0x15a70, lpNumberOfBytesWritten=0x4fe684, lpOverlapped=0x0 | out: lpBuffer=0x356f9d0*, lpNumberOfBytesWritten=0x4fe684*=0x15a70, lpOverlapped=0x0) returned 1 [0119.537] CloseHandle (hObject=0x404) returned 1 [0119.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv", lpFilePart=0x0) returned 0x5f [0119.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv.klavins", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv.klavins", lpFilePart=0x0) returned 0x67 [0119.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe668) returned 1 [0119.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\aikblf6bi26sgmmd.mkv"), fInfoLevelId=0x0, lpFileInformation=0x4fe6e4 | out: lpFileInformation=0x4fe6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f50f90, ftCreationTime.dwHighDateTime=0x1d5e121, ftLastAccessTime.dwLowDateTime=0x45c0aae0, ftLastAccessTime.dwHighDateTime=0x1d5e19c, ftLastWriteTime.dwLowDateTime=0x89560447, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x15a70)) returned 1 [0119.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe664) returned 1 [0119.543] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\aikblf6bi26sgmmd.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\aikBLF6BI26sgMMD.mkv.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\aikblf6bi26sgmmd.mkv.klavins")) returned 1 [0119.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi", nBufferLength=0x105, lpBuffer=0x4fe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi", lpFilePart=0x0) returned 0x53 [0119.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0119.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\vrsx.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.544] GetFileType (hFile=0x404) returned 0x1 [0119.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0119.544] GetFileType (hFile=0x404) returned 0x1 [0119.544] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe6e4 | out: lpFileSizeHigh=0x4fe6e4*=0x0) returned 0xe64f [0119.544] ReadFile (in: hFile=0x404, lpBuffer=0x249e33c, nNumberOfBytesToRead=0xe64f, lpNumberOfBytesRead=0x4fe690, lpOverlapped=0x0 | out: lpBuffer=0x249e33c*, lpNumberOfBytesRead=0x4fe690*=0xe64f, lpOverlapped=0x0) returned 1 [0119.545] CloseHandle (hObject=0x404) returned 1 [0119.564] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0119.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe6d8 | out: lpFileInformation=0x4fe6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0119.564] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi", nBufferLength=0x105, lpBuffer=0x4fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi", lpFilePart=0x0) returned 0x53 [0119.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5d4) returned 1 [0119.564] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\vrsx.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.566] GetFileType (hFile=0x404) returned 0x1 [0119.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5d0) returned 1 [0119.566] GetFileType (hFile=0x404) returned 0x1 [0119.566] WriteFile (in: hFile=0x404, lpBuffer=0x251642c*, nNumberOfBytesToWrite=0xe650, lpNumberOfBytesWritten=0x4fe684, lpOverlapped=0x0 | out: lpBuffer=0x251642c*, lpNumberOfBytesWritten=0x4fe684*=0xe650, lpOverlapped=0x0) returned 1 [0119.568] CloseHandle (hObject=0x404) returned 1 [0119.570] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi", lpFilePart=0x0) returned 0x53 [0119.570] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi.klavins", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi.klavins", lpFilePart=0x0) returned 0x5b [0119.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe668) returned 1 [0119.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\vrsx.avi"), fInfoLevelId=0x0, lpFileInformation=0x4fe6e4 | out: lpFileInformation=0x4fe6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4983e20, ftCreationTime.dwHighDateTime=0x1d5e831, ftLastAccessTime.dwLowDateTime=0xe456f810, ftLastAccessTime.dwHighDateTime=0x1d5ec3e, ftLastWriteTime.dwLowDateTime=0x895ac853, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xe650)) returned 1 [0119.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe664) returned 1 [0119.570] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\vrsx.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\vRSX.avi.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\vrsx.avi.klavins")) returned 1 [0119.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6c8) returned 1 [0119.571] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa", nBufferLength=0x105, lpBuffer=0x4fe17c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa", lpFilePart=0x0) returned 0x51 [0119.571] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\*", lpFindFileData=0x4fe3f0 | out: lpFindFileData=0x4fe3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6745bd30, ftCreationTime.dwHighDateTime=0x1d5e2fb, ftLastAccessTime.dwLowDateTime=0xc3748330, ftLastAccessTime.dwHighDateTime=0x1d5f015, ftLastWriteTime.dwLowDateTime=0xc3748330, ftLastWriteTime.dwHighDateTime=0x1d5f015, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e200 [0119.571] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6745bd30, ftCreationTime.dwHighDateTime=0x1d5e2fb, ftLastAccessTime.dwLowDateTime=0xc3748330, ftLastAccessTime.dwHighDateTime=0x1d5f015, ftLastWriteTime.dwLowDateTime=0xc3748330, ftLastWriteTime.dwHighDateTime=0x1d5f015, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.571] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabd990, ftCreationTime.dwHighDateTime=0x1d5e2af, ftLastAccessTime.dwLowDateTime=0xe9ae1ff0, ftLastAccessTime.dwHighDateTime=0x1d5ee1e, ftLastWriteTime.dwLowDateTime=0xe9ae1ff0, ftLastWriteTime.dwHighDateTime=0x1d5ee1e, nFileSizeHigh=0x0, nFileSizeLow=0x8332, dwReserved0=0x0, dwReserved1=0x0, cFileName="4IWoU OeuDpcj.swf", cAlternateFileName="4IWOUO~1.SWF")) returned 1 [0119.571] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1896bd0, ftCreationTime.dwHighDateTime=0x1d5e7c7, ftLastAccessTime.dwLowDateTime=0x61054370, ftLastAccessTime.dwHighDateTime=0x1d5ec63, ftLastWriteTime.dwLowDateTime=0x61054370, ftLastWriteTime.dwHighDateTime=0x1d5ec63, nFileSizeHigh=0x0, nFileSizeLow=0x4575, dwReserved0=0x0, dwReserved1=0x0, cFileName="bkMtCfBrgnrkn.swf", cAlternateFileName="BKMTCF~1.SWF")) returned 1 [0119.572] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1a040, ftCreationTime.dwHighDateTime=0x1d5e3d6, ftLastAccessTime.dwLowDateTime=0x176801c0, ftLastAccessTime.dwHighDateTime=0x1d5eb79, ftLastWriteTime.dwLowDateTime=0x176801c0, ftLastWriteTime.dwHighDateTime=0x1d5eb79, nFileSizeHigh=0x0, nFileSizeLow=0x6f7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="JsO7W v.flv", cAlternateFileName="JSO7WV~1.FLV")) returned 1 [0119.572] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1feda0f0, ftCreationTime.dwHighDateTime=0x1d5ef40, ftLastAccessTime.dwLowDateTime=0xd326c5f0, ftLastAccessTime.dwHighDateTime=0x1d5e7b8, ftLastWriteTime.dwLowDateTime=0xd326c5f0, ftLastWriteTime.dwHighDateTime=0x1d5e7b8, nFileSizeHigh=0x0, nFileSizeLow=0x1443d, dwReserved0=0x0, dwReserved1=0x0, cFileName="oOH5qrdZ.swf", cAlternateFileName="")) returned 1 [0119.572] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe05a8390, ftCreationTime.dwHighDateTime=0x1d5e58f, ftLastAccessTime.dwLowDateTime=0x2a5fc890, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0x2a5fc890, ftLastWriteTime.dwHighDateTime=0x1d5e119, nFileSizeHigh=0x0, nFileSizeLow=0x1712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TJx yA_2Rxpi.mkv", cAlternateFileName="TJXYA_~1.MKV")) returned 1 [0119.572] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf286340, ftCreationTime.dwHighDateTime=0x1d5e778, ftLastAccessTime.dwLowDateTime=0xa18a9e20, ftLastAccessTime.dwHighDateTime=0x1d5e9e0, ftLastWriteTime.dwLowDateTime=0xa18a9e20, ftLastWriteTime.dwHighDateTime=0x1d5e9e0, nFileSizeHigh=0x0, nFileSizeLow=0x2d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="xjvDAivargd99qJKD.mkv", cAlternateFileName="XJVDAI~1.MKV")) returned 1 [0119.572] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.572] FindClose (in: hFindFile=0x77e200 | out: hFindFile=0x77e200) returned 1 [0119.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe684) returned 1 [0119.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe690) returned 1 [0119.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe6c8) returned 1 [0119.573] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa", nBufferLength=0x105, lpBuffer=0x4fe17c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa", lpFilePart=0x0) returned 0x51 [0119.573] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\*", lpFindFileData=0x4fe3f0 | out: lpFindFileData=0x4fe3f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6745bd30, ftCreationTime.dwHighDateTime=0x1d5e2fb, ftLastAccessTime.dwLowDateTime=0xc3748330, ftLastAccessTime.dwHighDateTime=0x1d5f015, ftLastWriteTime.dwLowDateTime=0xc3748330, ftLastWriteTime.dwHighDateTime=0x1d5f015, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77e200 [0119.573] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6745bd30, ftCreationTime.dwHighDateTime=0x1d5e2fb, ftLastAccessTime.dwLowDateTime=0xc3748330, ftLastAccessTime.dwHighDateTime=0x1d5f015, ftLastWriteTime.dwLowDateTime=0xc3748330, ftLastWriteTime.dwHighDateTime=0x1d5f015, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.573] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aabd990, ftCreationTime.dwHighDateTime=0x1d5e2af, ftLastAccessTime.dwLowDateTime=0xe9ae1ff0, ftLastAccessTime.dwHighDateTime=0x1d5ee1e, ftLastWriteTime.dwLowDateTime=0xe9ae1ff0, ftLastWriteTime.dwHighDateTime=0x1d5ee1e, nFileSizeHigh=0x0, nFileSizeLow=0x8332, dwReserved0=0x0, dwReserved1=0x0, cFileName="4IWoU OeuDpcj.swf", cAlternateFileName="4IWOUO~1.SWF")) returned 1 [0119.573] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1896bd0, ftCreationTime.dwHighDateTime=0x1d5e7c7, ftLastAccessTime.dwLowDateTime=0x61054370, ftLastAccessTime.dwHighDateTime=0x1d5ec63, ftLastWriteTime.dwLowDateTime=0x61054370, ftLastWriteTime.dwHighDateTime=0x1d5ec63, nFileSizeHigh=0x0, nFileSizeLow=0x4575, dwReserved0=0x0, dwReserved1=0x0, cFileName="bkMtCfBrgnrkn.swf", cAlternateFileName="BKMTCF~1.SWF")) returned 1 [0119.573] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee1a040, ftCreationTime.dwHighDateTime=0x1d5e3d6, ftLastAccessTime.dwLowDateTime=0x176801c0, ftLastAccessTime.dwHighDateTime=0x1d5eb79, ftLastWriteTime.dwLowDateTime=0x176801c0, ftLastWriteTime.dwHighDateTime=0x1d5eb79, nFileSizeHigh=0x0, nFileSizeLow=0x6f7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="JsO7W v.flv", cAlternateFileName="JSO7WV~1.FLV")) returned 1 [0119.574] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1feda0f0, ftCreationTime.dwHighDateTime=0x1d5ef40, ftLastAccessTime.dwLowDateTime=0xd326c5f0, ftLastAccessTime.dwHighDateTime=0x1d5e7b8, ftLastWriteTime.dwLowDateTime=0xd326c5f0, ftLastWriteTime.dwHighDateTime=0x1d5e7b8, nFileSizeHigh=0x0, nFileSizeLow=0x1443d, dwReserved0=0x0, dwReserved1=0x0, cFileName="oOH5qrdZ.swf", cAlternateFileName="")) returned 1 [0119.574] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe05a8390, ftCreationTime.dwHighDateTime=0x1d5e58f, ftLastAccessTime.dwLowDateTime=0x2a5fc890, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0x2a5fc890, ftLastWriteTime.dwHighDateTime=0x1d5e119, nFileSizeHigh=0x0, nFileSizeLow=0x1712e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TJx yA_2Rxpi.mkv", cAlternateFileName="TJXYA_~1.MKV")) returned 1 [0119.574] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf286340, ftCreationTime.dwHighDateTime=0x1d5e778, ftLastAccessTime.dwLowDateTime=0xa18a9e20, ftLastAccessTime.dwHighDateTime=0x1d5e9e0, ftLastWriteTime.dwLowDateTime=0xa18a9e20, ftLastWriteTime.dwHighDateTime=0x1d5e9e0, nFileSizeHigh=0x0, nFileSizeLow=0x2d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="xjvDAivargd99qJKD.mkv", cAlternateFileName="XJVDAI~1.MKV")) returned 1 [0119.574] FindNextFileW (in: hFindFile=0x77e200, lpFindFileData=0x4fe3fc | out: lpFindFileData=0x4fe3fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf286340, ftCreationTime.dwHighDateTime=0x1d5e778, ftLastAccessTime.dwLowDateTime=0xa18a9e20, ftLastAccessTime.dwHighDateTime=0x1d5e9e0, ftLastWriteTime.dwLowDateTime=0xa18a9e20, ftLastWriteTime.dwHighDateTime=0x1d5e9e0, nFileSizeHigh=0x0, nFileSizeLow=0x2d44, dwReserved0=0x0, dwReserved1=0x0, cFileName="xjvDAivargd99qJKD.mkv", cAlternateFileName="XJVDAI~1.MKV")) returned 0 [0119.574] FindClose (in: hFindFile=0x77e200 | out: hFindFile=0x77e200) returned 1 [0119.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe684) returned 1 [0119.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe690) returned 1 [0119.574] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv", nBufferLength=0x105, lpBuffer=0x4fe030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv", lpFilePart=0x0) returned 0x63 [0119.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe574) returned 1 [0119.574] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\1khika\\tjx ya_2rxpi.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.575] GetFileType (hFile=0x404) returned 0x1 [0119.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe570) returned 1 [0119.575] GetFileType (hFile=0x404) returned 0x1 [0119.575] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe670 | out: lpFileSizeHigh=0x4fe670*=0x0) returned 0x1712e [0119.578] ReadFile (in: hFile=0x404, lpBuffer=0x35a2100, nNumberOfBytesToRead=0x1712e, lpNumberOfBytesRead=0x4fe61c, lpOverlapped=0x0 | out: lpBuffer=0x35a2100*, lpNumberOfBytesRead=0x4fe61c*=0x1712e, lpOverlapped=0x0) returned 1 [0119.579] CloseHandle (hObject=0x404) returned 1 [0119.600] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe134, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0119.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe664 | out: lpFileInformation=0x4fe664*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0119.601] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv", nBufferLength=0x105, lpBuffer=0x4fe01c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv", lpFilePart=0x0) returned 0x63 [0119.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe560) returned 1 [0119.601] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\1khika\\tjx ya_2rxpi.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.603] GetFileType (hFile=0x404) returned 0x1 [0119.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe55c) returned 1 [0119.603] GetFileType (hFile=0x404) returned 0x1 [0119.603] WriteFile (in: hFile=0x404, lpBuffer=0x3615730*, nNumberOfBytesToWrite=0x17130, lpNumberOfBytesWritten=0x4fe610, lpOverlapped=0x0 | out: lpBuffer=0x3615730*, lpNumberOfBytesWritten=0x4fe610*=0x17130, lpOverlapped=0x0) returned 1 [0119.605] CloseHandle (hObject=0x404) returned 1 [0119.608] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv", nBufferLength=0x105, lpBuffer=0x4fe140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv", lpFilePart=0x0) returned 0x63 [0119.608] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv.klavins", nBufferLength=0x105, lpBuffer=0x4fe140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv.klavins", lpFilePart=0x0) returned 0x6b [0119.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5f4) returned 1 [0119.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\1khika\\tjx ya_2rxpi.mkv"), fInfoLevelId=0x0, lpFileInformation=0x4fe670 | out: lpFileInformation=0x4fe670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe05a8390, ftCreationTime.dwHighDateTime=0x1d5e58f, ftLastAccessTime.dwLowDateTime=0x2a5fc890, ftLastAccessTime.dwHighDateTime=0x1d5e119, ftLastWriteTime.dwLowDateTime=0x8961ef2a, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x17130)) returned 1 [0119.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5f0) returned 1 [0119.609] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\1khika\\tjx ya_2rxpi.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\TJx yA_2Rxpi.mkv.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\1khika\\tjx ya_2rxpi.mkv.klavins")) returned 1 [0119.610] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv", nBufferLength=0x105, lpBuffer=0x4fe030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv", lpFilePart=0x0) returned 0x67 [0119.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe574) returned 1 [0119.610] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\1khika\\xjvdaivargd99qjkd.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.610] GetFileType (hFile=0x404) returned 0x1 [0119.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe570) returned 1 [0119.610] GetFileType (hFile=0x404) returned 0x1 [0119.610] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe670 | out: lpFileSizeHigh=0x4fe670*=0x0) returned 0x2d44 [0119.610] ReadFile (in: hFile=0x404, lpBuffer=0x2575438, nNumberOfBytesToRead=0x2d44, lpNumberOfBytesRead=0x4fe61c, lpOverlapped=0x0 | out: lpBuffer=0x2575438*, lpNumberOfBytesRead=0x4fe61c*=0x2d44, lpOverlapped=0x0) returned 1 [0119.611] CloseHandle (hObject=0x404) returned 1 [0119.641] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe134, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0119.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe664 | out: lpFileInformation=0x4fe664*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0119.641] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv", nBufferLength=0x105, lpBuffer=0x4fe01c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv", lpFilePart=0x0) returned 0x67 [0119.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe560) returned 1 [0119.641] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\1khika\\xjvdaivargd99qjkd.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.643] GetFileType (hFile=0x404) returned 0x1 [0119.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe55c) returned 1 [0119.643] GetFileType (hFile=0x404) returned 0x1 [0119.643] WriteFile (in: hFile=0x404, lpBuffer=0x23d4da0*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x4fe610, lpOverlapped=0x0 | out: lpBuffer=0x23d4da0*, lpNumberOfBytesWritten=0x4fe610*=0x2d50, lpOverlapped=0x0) returned 1 [0119.645] CloseHandle (hObject=0x404) returned 1 [0119.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv", nBufferLength=0x105, lpBuffer=0x4fe140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv", lpFilePart=0x0) returned 0x67 [0119.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv.klavins", nBufferLength=0x105, lpBuffer=0x4fe140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv.klavins", lpFilePart=0x0) returned 0x6f [0119.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5f4) returned 1 [0119.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\1khika\\xjvdaivargd99qjkd.mkv"), fInfoLevelId=0x0, lpFileInformation=0x4fe670 | out: lpFileInformation=0x4fe670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf286340, ftCreationTime.dwHighDateTime=0x1d5e778, ftLastAccessTime.dwLowDateTime=0xa18a9e20, ftLastAccessTime.dwHighDateTime=0x1d5e9e0, ftLastWriteTime.dwLowDateTime=0x8966b52f, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0x2d50)) returned 1 [0119.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5f0) returned 1 [0119.648] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\1khika\\xjvdaivargd99qjkd.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\EzLrLSlA1TZf8Z\\1KHIKa\\xjvDAivargd99qJKD.mkv.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\ezlrlsla1tzf8z\\1khika\\xjvdaivargd99qjkd.mkv.klavins")) returned 1 [0119.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0119.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc", lpFilePart=0x0) returned 0x41 [0119.650] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fcb6520, ftCreationTime.dwHighDateTime=0x1d5f026, ftLastAccessTime.dwLowDateTime=0xde82dd20, ftLastAccessTime.dwHighDateTime=0x1d5e89f, ftLastWriteTime.dwLowDateTime=0xde82dd20, ftLastWriteTime.dwHighDateTime=0x1d5e89f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77df00 [0119.650] FindNextFileW (in: hFindFile=0x77df00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fcb6520, ftCreationTime.dwHighDateTime=0x1d5f026, ftLastAccessTime.dwLowDateTime=0xde82dd20, ftLastAccessTime.dwHighDateTime=0x1d5e89f, ftLastWriteTime.dwLowDateTime=0xde82dd20, ftLastWriteTime.dwHighDateTime=0x1d5e89f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.651] FindNextFileW (in: hFindFile=0x77df00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6244cc00, ftCreationTime.dwHighDateTime=0x1d5eb29, ftLastAccessTime.dwLowDateTime=0x6ac50e90, ftLastAccessTime.dwHighDateTime=0x1d5e84e, ftLastWriteTime.dwLowDateTime=0x6ac50e90, ftLastWriteTime.dwHighDateTime=0x1d5e84e, nFileSizeHigh=0x0, nFileSizeLow=0x11e22, dwReserved0=0x0, dwReserved1=0x0, cFileName="4p1jIx1uLvMoPnOVF0A.swf", cAlternateFileName="4P1JIX~1.SWF")) returned 1 [0119.651] FindNextFileW (in: hFindFile=0x77df00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c62e250, ftCreationTime.dwHighDateTime=0x1d5e80e, ftLastAccessTime.dwLowDateTime=0x959b6a0, ftLastAccessTime.dwHighDateTime=0x1d5ebb5, ftLastWriteTime.dwLowDateTime=0x959b6a0, ftLastWriteTime.dwHighDateTime=0x1d5ebb5, nFileSizeHigh=0x0, nFileSizeLow=0xe97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="enTGQchT.avi", cAlternateFileName="")) returned 1 [0119.651] FindNextFileW (in: hFindFile=0x77df00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x749e75c0, ftCreationTime.dwHighDateTime=0x1d5e284, ftLastAccessTime.dwLowDateTime=0xd6f48b70, ftLastAccessTime.dwHighDateTime=0x1d5ecc9, ftLastWriteTime.dwLowDateTime=0xd6f48b70, ftLastWriteTime.dwHighDateTime=0x1d5ecc9, nFileSizeHigh=0x0, nFileSizeLow=0xd4a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="TgjjFQaJAJPzPo7coV.swf", cAlternateFileName="TGJJFQ~1.SWF")) returned 1 [0119.651] FindNextFileW (in: hFindFile=0x77df00, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.651] FindClose (in: hFindFile=0x77df00 | out: hFindFile=0x77df00) returned 1 [0119.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0119.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0119.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe73c) returned 1 [0119.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc", nBufferLength=0x105, lpBuffer=0x4fe1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc", lpFilePart=0x0) returned 0x41 [0119.652] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\*", lpFindFileData=0x4fe464 | out: lpFindFileData=0x4fe464*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fcb6520, ftCreationTime.dwHighDateTime=0x1d5f026, ftLastAccessTime.dwLowDateTime=0xde82dd20, ftLastAccessTime.dwHighDateTime=0x1d5e89f, ftLastWriteTime.dwLowDateTime=0xde82dd20, ftLastWriteTime.dwHighDateTime=0x1d5e89f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x77de40 [0119.652] FindNextFileW (in: hFindFile=0x77de40, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fcb6520, ftCreationTime.dwHighDateTime=0x1d5f026, ftLastAccessTime.dwLowDateTime=0xde82dd20, ftLastAccessTime.dwHighDateTime=0x1d5e89f, ftLastWriteTime.dwLowDateTime=0xde82dd20, ftLastWriteTime.dwHighDateTime=0x1d5e89f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.652] FindNextFileW (in: hFindFile=0x77de40, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6244cc00, ftCreationTime.dwHighDateTime=0x1d5eb29, ftLastAccessTime.dwLowDateTime=0x6ac50e90, ftLastAccessTime.dwHighDateTime=0x1d5e84e, ftLastWriteTime.dwLowDateTime=0x6ac50e90, ftLastWriteTime.dwHighDateTime=0x1d5e84e, nFileSizeHigh=0x0, nFileSizeLow=0x11e22, dwReserved0=0x0, dwReserved1=0x0, cFileName="4p1jIx1uLvMoPnOVF0A.swf", cAlternateFileName="4P1JIX~1.SWF")) returned 1 [0119.652] FindNextFileW (in: hFindFile=0x77de40, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c62e250, ftCreationTime.dwHighDateTime=0x1d5e80e, ftLastAccessTime.dwLowDateTime=0x959b6a0, ftLastAccessTime.dwHighDateTime=0x1d5ebb5, ftLastWriteTime.dwLowDateTime=0x959b6a0, ftLastWriteTime.dwHighDateTime=0x1d5ebb5, nFileSizeHigh=0x0, nFileSizeLow=0xe97e, dwReserved0=0x0, dwReserved1=0x0, cFileName="enTGQchT.avi", cAlternateFileName="")) returned 1 [0119.653] FindNextFileW (in: hFindFile=0x77de40, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x749e75c0, ftCreationTime.dwHighDateTime=0x1d5e284, ftLastAccessTime.dwLowDateTime=0xd6f48b70, ftLastAccessTime.dwHighDateTime=0x1d5ecc9, ftLastWriteTime.dwLowDateTime=0xd6f48b70, ftLastWriteTime.dwHighDateTime=0x1d5ecc9, nFileSizeHigh=0x0, nFileSizeLow=0xd4a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="TgjjFQaJAJPzPo7coV.swf", cAlternateFileName="TGJJFQ~1.SWF")) returned 1 [0119.653] FindNextFileW (in: hFindFile=0x77de40, lpFindFileData=0x4fe470 | out: lpFindFileData=0x4fe470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x749e75c0, ftCreationTime.dwHighDateTime=0x1d5e284, ftLastAccessTime.dwLowDateTime=0xd6f48b70, ftLastAccessTime.dwHighDateTime=0x1d5ecc9, ftLastWriteTime.dwLowDateTime=0xd6f48b70, ftLastWriteTime.dwHighDateTime=0x1d5ecc9, nFileSizeHigh=0x0, nFileSizeLow=0xd4a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="TgjjFQaJAJPzPo7coV.swf", cAlternateFileName="TGJJFQ~1.SWF")) returned 0 [0119.653] FindClose (in: hFindFile=0x77de40 | out: hFindFile=0x77de40) returned 1 [0119.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe6f8) returned 1 [0119.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe704) returned 1 [0119.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi", nBufferLength=0x105, lpBuffer=0x4fe0a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi", lpFilePart=0x0) returned 0x4e [0119.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5e8) returned 1 [0119.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\xfxdc\\entgqcht.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.654] GetFileType (hFile=0x404) returned 0x1 [0119.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5e4) returned 1 [0119.654] GetFileType (hFile=0x404) returned 0x1 [0119.654] GetFileSize (in: hFile=0x404, lpFileSizeHigh=0x4fe6e4 | out: lpFileSizeHigh=0x4fe6e4*=0x0) returned 0xe97e [0119.654] ReadFile (in: hFile=0x404, lpBuffer=0x23d9f20, nNumberOfBytesToRead=0xe97e, lpNumberOfBytesRead=0x4fe690, lpOverlapped=0x0 | out: lpBuffer=0x23d9f20*, lpNumberOfBytesRead=0x4fe690*=0xe97e, lpOverlapped=0x0) returned 1 [0119.655] CloseHandle (hObject=0x404) returned 1 [0119.731] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", nBufferLength=0x105, lpBuffer=0x4fe1a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked", lpFilePart=0x0) returned 0x2a [0119.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe65c) returned 1 [0119.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\READ_IT.txt.locked" (normalized: "c:\\users\\fd1hvy\\desktop\\read_it.txt.locked"), fInfoLevelId=0x0, lpFileInformation=0x4fe6d8 | out: lpFileInformation=0x4fe6d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0119.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe658) returned 1 [0119.732] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi", nBufferLength=0x105, lpBuffer=0x4fe090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi", lpFilePart=0x0) returned 0x4e [0119.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe5d4) returned 1 [0119.732] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\xfxdc\\entgqcht.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x404 [0119.734] GetFileType (hFile=0x404) returned 0x1 [0119.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe5d0) returned 1 [0119.734] GetFileType (hFile=0x404) returned 0x1 [0119.734] WriteFile (in: hFile=0x404, lpBuffer=0x2452afc*, nNumberOfBytesToWrite=0xe980, lpNumberOfBytesWritten=0x4fe684, lpOverlapped=0x0 | out: lpBuffer=0x2452afc*, lpNumberOfBytesWritten=0x4fe684*=0xe980, lpOverlapped=0x0) returned 1 [0119.736] CloseHandle (hObject=0x404) returned 1 [0119.739] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi", lpFilePart=0x0) returned 0x4e [0119.739] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi.klavins", nBufferLength=0x105, lpBuffer=0x4fe1b4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi.klavins", lpFilePart=0x0) returned 0x56 [0119.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe668) returned 1 [0119.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\xfxdc\\entgqcht.avi"), fInfoLevelId=0x0, lpFileInformation=0x4fe6e4 | out: lpFileInformation=0x4fe6e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c62e250, ftCreationTime.dwHighDateTime=0x1d5e80e, ftLastAccessTime.dwLowDateTime=0x959b6a0, ftLastAccessTime.dwHighDateTime=0x1d5ebb5, ftLastWriteTime.dwLowDateTime=0x897502ef, ftLastWriteTime.dwHighDateTime=0x1d6811a, nFileSizeHigh=0x0, nFileSizeLow=0xe980)) returned 1 [0119.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fe664) returned 1 [0119.740] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\xfxdc\\entgqcht.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\YSFmOD gwJSu xU3b\\j-dNPr5d3JjQc75LvL\\xFxdc\\enTGQchT.avi.klavins" (normalized: "c:\\users\\fd1hvy\\videos\\ysfmod gwjsu xu3b\\j-dnpr5d3jjqc75lvl\\xfxdc\\entgqcht.avi.klavins")) returned 1 [0119.888] GetCurrentProcess () returned 0xffffffff [0119.888] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe58c | out: TokenHandle=0x4fe58c*=0x2e4) returned 1 [0119.907] GetCurrentProcess () returned 0xffffffff [0119.907] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe59c | out: TokenHandle=0x4fe59c*=0x2d0) returned 1 [0119.923] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2d4 [0119.923] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x2e8 [0119.932] GetCurrentProcess () returned 0xffffffff [0119.932] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe5ac | out: TokenHandle=0x4fe5ac*=0x2d8) returned 1 [0119.936] GetCurrentProcess () returned 0xffffffff [0119.936] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe5bc | out: TokenHandle=0x4fe5bc*=0x2dc) returned 1 [0119.954] QueryPerformanceFrequency (in: lpFrequency=0x605aa0 | out: lpFrequency=0x605aa0*=100000000) returned 1 [0119.954] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe930 | out: lpPerformanceCount=0x4fe930*=21525391970) returned 1 [0119.959] GetCurrentProcess () returned 0xffffffff [0119.959] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe578 | out: TokenHandle=0x4fe578*=0x2cc) returned 1 [0119.964] GetCurrentProcess () returned 0xffffffff [0119.964] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe588 | out: TokenHandle=0x4fe588*=0x2e0) returned 1 [0120.030] GetCurrentProcess () returned 0xffffffff [0120.030] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe58c | out: TokenHandle=0x4fe58c*=0x414) returned 1 [0120.032] GetCurrentProcess () returned 0xffffffff [0120.033] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe59c | out: TokenHandle=0x4fe59c*=0x418) returned 1 [0120.037] GetCurrentProcess () returned 0xffffffff [0120.037] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe814 | out: TokenHandle=0x4fe814*=0x41c) returned 1 [0120.045] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fd94c | out: phkResult=0x4fd94c*=0x420) returned 0x0 [0120.045] RegQueryValueExW (in: hKey=0x420, lpValueName="InstallationType", lpReserved=0x0, lpType=0x4fd96c, lpData=0x0, lpcbData=0x4fd968*=0x0 | out: lpType=0x4fd96c*=0x1, lpData=0x0, lpcbData=0x4fd968*=0xe) returned 0x0 [0120.046] RegQueryValueExW (in: hKey=0x420, lpValueName="InstallationType", lpReserved=0x0, lpType=0x4fd96c, lpData=0x246ba44, lpcbData=0x4fd968*=0xe | out: lpType=0x4fd96c*=0x1, lpData="Client", lpcbData=0x4fd968*=0xe) returned 0x0 [0120.046] RegCloseKey (hKey=0x420) returned 0x0 [0121.586] CoTaskMemAlloc (cb=0xcc0) returned 0x7f06b8 [0121.588] RasEnumConnectionsW (in: param_1=0x7f06b8, param_2=0x4fe824, param_3=0x4fe828 | out: param_1=0x7f06b8, param_2=0x4fe824, param_3=0x4fe828) returned 0x0 [0122.044] CoTaskMemFree (pv=0x7f06b8) [0124.030] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x4fe610 | out: lpWSAData=0x4fe610) returned 0 [0124.036] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x484 [0124.578] setsockopt (s=0x484, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0124.578] closesocket (s=0x484) returned 0 [0124.579] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x484 [0124.580] setsockopt (s=0x484, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0124.580] closesocket (s=0x484) returned 0 [0124.581] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x484 [0124.581] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x488 [0124.601] ioctlsocket (in: s=0x484, cmd=-2147195266, argp=0x4fe82c | out: argp=0x4fe82c) returned 0 [0124.601] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x48c [0124.602] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x490 [0124.602] ioctlsocket (in: s=0x48c, cmd=-2147195266, argp=0x4fe82c | out: argp=0x4fe82c) returned 0 [0124.603] WSAIoctl (in: s=0x484, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x4fe814, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x4fe814, lpOverlapped=0x0) returned -1 [0124.607] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x4fe544, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0124.615] WSAEventSelect (s=0x484, hEventObject=0x488, lNetworkEvents=512) returned 0 [0124.617] WSAIoctl (in: s=0x48c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x4fe814, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x4fe814, lpOverlapped=0x0) returned -1 [0124.617] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x4fe544, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0124.617] WSAEventSelect (s=0x48c, hEventObject=0x490, lNetworkEvents=512) returned 0 [0124.617] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x498 [0124.618] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x498, param_3=0x3) returned 0x0 [0124.632] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x4fe840 | out: phkResult=0x4fe840*=0x4b0) returned 0x0 [0124.633] RegOpenKeyExW (in: hKey=0x4b0, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe7f4 | out: phkResult=0x4fe7f4*=0x4b4) returned 0x0 [0124.633] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4b8 [0124.633] RegNotifyChangeKeyValue (hKey=0x4b4, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x4b8, fAsynchronous=1) returned 0x0 [0124.634] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe7f8 | out: phkResult=0x4fe7f8*=0x4bc) returned 0x0 [0124.635] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4c0 [0124.635] RegNotifyChangeKeyValue (hKey=0x4bc, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x4c0, fAsynchronous=1) returned 0x0 [0124.635] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe7f8 | out: phkResult=0x4fe7f8*=0x4c4) returned 0x0 [0124.635] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4c8 [0124.636] RegNotifyChangeKeyValue (hKey=0x4c4, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x4c8, fAsynchronous=1) returned 0x0 [0124.636] GetCurrentProcess () returned 0xffffffff [0124.636] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe7e4 | out: TokenHandle=0x4fe7e4*=0x4cc) returned 1 [0124.641] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe0f0 | out: phkResult=0x4fe0f0*=0x4d0) returned 0x0 [0124.641] RegQueryValueExW (in: hKey=0x4d0, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0x4fe10c, lpData=0x0, lpcbData=0x4fe108*=0x0 | out: lpType=0x4fe10c*=0x0, lpData=0x0, lpcbData=0x4fe108*=0x0) returned 0x2 [0124.641] RegCloseKey (hKey=0x4d0) returned 0x0 [0125.403] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x7faf88 [0126.194] WinHttpSetTimeouts (hInternet=0x7faf88, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1 [0126.195] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x4fe7f4 | out: pProxyConfig=0x4fe7f4) returned 1 [0126.813] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x4fdff4, nSize=0xba | out: lpBuffer="︽玲ꭸs#") returned 0x0 [0126.813] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x4fdff4, nSize=0xba | out: lpBuffer="︽玲ꭸs#") returned 0x0 [0126.836] EtwEventRegister (in: ProviderId=0x246e6ac, EnableCallback=0x4930636, CallbackContext=0x0, RegHandle=0x246e688 | out: RegHandle=0x246e688) returned 0x0 [0126.836] EtwEventSetInformation (RegHandle=0x79edb0, InformationClass=0x65, EventInformation=0x2, InformationLength=0x246e648) returned 0x0 [0126.839] GetCurrentProcess () returned 0xffffffff [0126.839] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe554 | out: TokenHandle=0x4fe554*=0x514) returned 1 [0126.841] GetCurrentProcess () returned 0xffffffff [0126.841] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe564 | out: TokenHandle=0x4fe564*=0x518) returned 1 [0126.846] SetEvent (hEvent=0x2d4) returned 1 [0126.863] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe75c*=0x498, lpdwindex=0x4fe57c | out: lpdwindex=0x4fe57c) returned 0x80010115 [0126.891] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe73c*=0x488, lpdwindex=0x4fe55c | out: lpdwindex=0x4fe55c) returned 0x80010115 [0126.891] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe73c*=0x490, lpdwindex=0x4fe55c | out: lpdwindex=0x4fe55c) returned 0x80010115 [0126.892] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe790*=0x4b8, lpdwindex=0x4fe5ac | out: lpdwindex=0x4fe5ac) returned 0x80010115 [0126.892] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe790*=0x4c0, lpdwindex=0x4fe5ac | out: lpdwindex=0x4fe5ac) returned 0x80010115 [0126.893] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe790*=0x4c8, lpdwindex=0x4fe5ac | out: lpdwindex=0x4fe5ac) returned 0x80010115 [0126.897] GetCurrentProcess () returned 0xffffffff [0126.897] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe4cc | out: TokenHandle=0x4fe4cc*=0x554) returned 1 [0126.898] GetCurrentProcess () returned 0xffffffff [0126.898] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe4dc | out: TokenHandle=0x4fe4dc*=0x558) returned 1 [0126.900] GetTimeZoneInformation (in: lpTimeZoneInformation=0x4fe64c | out: lpTimeZoneInformation=0x4fe64c) returned 0x2 [0126.902] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x4fe4a8 | out: pTimeZoneInformation=0x4fe4a8) returned 0x2 [0126.903] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe58c | out: phkResult=0x4fe58c*=0x55c) returned 0x0 [0126.903] RegQueryValueExW (in: hKey=0x55c, lpValueName="TZI", lpReserved=0x0, lpType=0x4fe5a8, lpData=0x0, lpcbData=0x4fe5a4*=0x0 | out: lpType=0x4fe5a8*=0x3, lpData=0x0, lpcbData=0x4fe5a4*=0x2c) returned 0x0 [0126.904] RegQueryValueExW (in: hKey=0x55c, lpValueName="TZI", lpReserved=0x0, lpType=0x4fe5a8, lpData=0x24716c4, lpcbData=0x4fe5a4*=0x2c | out: lpType=0x4fe5a8*=0x3, lpData=0x24716c4*, lpcbData=0x4fe5a4*=0x2c) returned 0x0 [0126.904] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe3e0 | out: phkResult=0x4fe3e0*=0x0) returned 0x2 [0126.905] RegQueryValueExW (in: hKey=0x55c, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x4fe580, lpData=0x0, lpcbData=0x4fe57c*=0x0 | out: lpType=0x4fe580*=0x1, lpData=0x0, lpcbData=0x4fe57c*=0x20) returned 0x0 [0126.905] RegQueryValueExW (in: hKey=0x55c, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x4fe580, lpData=0x2471ae8, lpcbData=0x4fe57c*=0x20 | out: lpType=0x4fe580*=0x1, lpData="@tzres.dll,-320", lpcbData=0x4fe57c*=0x20) returned 0x0 [0126.905] RegQueryValueExW (in: hKey=0x55c, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x4fe580, lpData=0x0, lpcbData=0x4fe57c*=0x0 | out: lpType=0x4fe580*=0x1, lpData=0x0, lpcbData=0x4fe57c*=0x20) returned 0x0 [0126.905] RegQueryValueExW (in: hKey=0x55c, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x4fe580, lpData=0x2471b40, lpcbData=0x4fe57c*=0x20 | out: lpType=0x4fe580*=0x1, lpData="@tzres.dll,-322", lpcbData=0x4fe57c*=0x20) returned 0x0 [0126.905] RegQueryValueExW (in: hKey=0x55c, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x4fe580, lpData=0x0, lpcbData=0x4fe57c*=0x0 | out: lpType=0x4fe580*=0x1, lpData=0x0, lpcbData=0x4fe57c*=0x20) returned 0x0 [0126.905] RegQueryValueExW (in: hKey=0x55c, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x4fe580, lpData=0x2471b98, lpcbData=0x4fe57c*=0x20 | out: lpType=0x4fe580*=0x1, lpData="@tzres.dll,-321", lpcbData=0x4fe57c*=0x20) returned 0x0 [0126.912] CoTaskMemAlloc (cb=0x20c) returned 0x7694868 [0126.912] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x7694868 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0126.914] CoTaskMemFree (pv=0x7694868) [0126.914] CoTaskMemAlloc (cb=0x20c) returned 0x7694868 [0126.915] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x4fe59c, pwszFileMUIPath=0x7694868, pcchFileMUIPath=0x4fe5a0, pululEnumerator=0x4fe594 | out: pwszLanguage=0x0, pcchLanguage=0x4fe59c, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x4fe5a0, pululEnumerator=0x4fe594) returned 1 [0126.958] CoTaskMemFree (pv=0x0) [0126.958] CoTaskMemFree (pv=0x7694868) [0126.958] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x4a90001 [0126.973] CoTaskMemAlloc (cb=0x3ec) returned 0x769c9d8 [0126.973] LoadStringW (in: hInstance=0x4a90001, uID=0x140, lpBuffer=0x769c9d8, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna") returned 0x3c [0126.973] CoTaskMemFree (pv=0x769c9d8) [0126.973] FreeLibrary (hLibModule=0x4a90001) returned 1 [0126.974] CoTaskMemAlloc (cb=0x20c) returned 0x7697338 [0126.974] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x7697338 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0126.974] CoTaskMemFree (pv=0x7697338) [0126.974] CoTaskMemAlloc (cb=0x20c) returned 0x7697338 [0126.974] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x4fe59c, pwszFileMUIPath=0x7697338, pcchFileMUIPath=0x4fe5a0, pululEnumerator=0x4fe594 | out: pwszLanguage=0x0, pcchLanguage=0x4fe59c, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x4fe5a0, pululEnumerator=0x4fe594) returned 1 [0126.974] CoTaskMemFree (pv=0x0) [0126.974] CoTaskMemFree (pv=0x7697338) [0126.974] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x4a90001 [0126.975] CoTaskMemAlloc (cb=0x3ec) returned 0x769c9d8 [0126.975] LoadStringW (in: hInstance=0x4a90001, uID=0x142, lpBuffer=0x769c9d8, cchBufferMax=500 | out: lpBuffer="W. Europe Standard Time") returned 0x17 [0126.975] CoTaskMemFree (pv=0x769c9d8) [0126.975] FreeLibrary (hLibModule=0x4a90001) returned 1 [0126.976] CoTaskMemAlloc (cb=0x20c) returned 0x7697338 [0126.976] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x7697338 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0126.976] CoTaskMemFree (pv=0x7697338) [0126.976] CoTaskMemAlloc (cb=0x20c) returned 0x7697338 [0126.976] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x4fe59c, pwszFileMUIPath=0x7697338, pcchFileMUIPath=0x4fe5a0, pululEnumerator=0x4fe594 | out: pwszLanguage=0x0, pcchLanguage=0x4fe59c, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x4fe5a0, pululEnumerator=0x4fe594) returned 1 [0126.976] CoTaskMemFree (pv=0x0) [0126.976] CoTaskMemFree (pv=0x7697338) [0126.976] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x4a90001 [0126.977] CoTaskMemAlloc (cb=0x3ec) returned 0x769c9d8 [0126.977] LoadStringW (in: hInstance=0x4a90001, uID=0x141, lpBuffer=0x769c9d8, cchBufferMax=500 | out: lpBuffer="W. Europe Daylight Time") returned 0x17 [0126.977] CoTaskMemFree (pv=0x769c9d8) [0126.977] FreeLibrary (hLibModule=0x4a90001) returned 1 [0126.978] RegCloseKey (hKey=0x55c) returned 0x0 [0126.978] SetEvent (hEvent=0x2d4) returned 1 [0126.993] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x4fe7a8 | out: pFixedInfo=0x0, pOutBufLen=0x4fe7a8) returned 0x6f [0128.002] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x7698e38 [0128.002] GetNetworkParams (in: pFixedInfo=0x7698e38, pOutBufLen=0x4fe7a8 | out: pFixedInfo=0x7698e38, pOutBufLen=0x4fe7a8) returned 0x0 [0128.085] LocalFree (hMem=0x7698e38) returned 0x0 [0128.088] CoTaskMemAlloc (cb=0x20c) returned 0x7697338 [0128.088] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0x7697338, nSize=0x104 | out: lpBuffer="踸ݩ䡨ݩ") returned 0x0 [0128.088] CoTaskMemFree (pv=0x7697338) [0128.088] CoTaskMemAlloc (cb=0x20c) returned 0x7697338 [0128.088] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0x7697338, nSize=0x104 | out: lpBuffer="踸ݩ䡨ݩ") returned 0x0 [0128.088] CoTaskMemFree (pv=0x7697338) [0128.098] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5a0 [0128.100] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x578 [0128.101] GetAddrInfoW (in: pNodeName="www.google.com", pServiceName=0x0, pHints=0x4fe690*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x4fe638 | out: ppResult=0x4fe638*=0x7abc50*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="www.google.com", ai_addr=0x7fe670*(sa_family=2, sin_port=0x0, sin_addr="172.217.22.100"), ai_next=0x0)) returned 0 [0128.878] FreeAddrInfoW (pAddrInfo=0x7abc50*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="www.google.com", ai_addr=0x7fe670*(sa_family=2, sin_port=0x0, sin_addr="172.217.22.100"), ai_next=0x0)) [0128.885] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5a8 [0128.885] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5b4 [0128.885] ioctlsocket (in: s=0x5a8, cmd=-2147195266, argp=0x4fe664 | out: argp=0x4fe664) returned 0 [0128.885] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5b8 [0128.885] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5bc [0128.885] ioctlsocket (in: s=0x5b8, cmd=-2147195266, argp=0x4fe664 | out: argp=0x4fe664) returned 0 [0128.886] WSAIoctl (in: s=0x5a8, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x4fe64c, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x4fe64c, lpOverlapped=0x0) returned -1 [0128.886] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x4fe37c, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0128.886] WSAEventSelect (s=0x5a8, hEventObject=0x5b4, lNetworkEvents=512) returned 0 [0128.886] WSAIoctl (in: s=0x5b8, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x4fe64c, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x4fe64c, lpOverlapped=0x0) returned -1 [0128.886] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x4fe37c, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0128.886] WSAEventSelect (s=0x5b8, hEventObject=0x5bc, lNetworkEvents=512) returned 0 [0128.887] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x4fe648*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x4fe648*=0x818) returned 0x6f [0128.911] LocalAlloc (uFlags=0x0, uBytes=0x818) returned 0x76a4dd8 [0128.911] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x76a4dd8, SizePointer=0x4fe648*=0x818 | out: AdapterAddresses=0x76a4dd8*(Alignment=0x300000178, Length=0x178, IfIndex=0x3, Next=0x76a5088, AdapterName="{9E48833B-70C6-43EE-85DC-893C1782D802}", FirstUnicastAddress=0x76a4ffc, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) 82574L Gigabit Network Connection #2", FriendlyName="Ethernet 2", PhysicalAddress=([0]=0x0, [1]=0x18, [2]=0x27, [3]=0x5b, [4]=0x97, [5]=0xe9, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x1c5, DdnsEnabled=0x1c5, RegisterAdapterSuffix=0x1c5, Dhcpv4Enabled=0x1c5, ReceiveOnly=0x1c5, NoMulticast=0x1c5, Ipv6OtherStatefulConfig=0x1c5, NetbiosOverTcpipEnabled=0x1c5, Ipv4Enabled=0x1c5, Ipv6Enabled=0x1c5, Ipv6ManagedAddressConfigurationSupported=0x1c5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0x3, ZoneIndices=([0]=0x3, [1]=0x3, [2]=0x3, [3]=0x3, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0x19, Ipv6Metric=0x19, Luid=0x6008002000000, Dhcpv4Server.lpSockaddr=0x76a4f50*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11e7933cfae992b0, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x23, [5]=0x7d, [6]=0xeb, [7]=0x9, [8]=0x7c, [9]=0x4a, [10]=0x82, [11]=0x56, [12]=0xb9, [13]=0x2b, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x57c4a82, FirstDnsSuffix=0x0), SizePointer=0x4fe648*=0x818) returned 0x0 [0128.921] LocalFree (hMem=0x76a4dd8) returned 0x0 [0128.933] WSAConnect (in: s=0x5a0, name=0x247d78c*(sa_family=2, sin_port=0x1bb, sin_addr="172.217.22.100"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0128.956] closesocket (s=0x578) returned 0 [0128.974] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe598 | out: phkResult=0x4fe598*=0x578) returned 0x0 [0128.974] RegQueryValueExW (in: hKey=0x578, lpValueName="HWRPortReuseOnSocketBind", lpReserved=0x0, lpType=0x4fe5b4, lpData=0x0, lpcbData=0x4fe5b0*=0x0 | out: lpType=0x4fe5b4*=0x0, lpData=0x0, lpcbData=0x4fe5b0*=0x0) returned 0x2 [0128.974] RegCloseKey (hKey=0x578) returned 0x0 [0128.985] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe59c | out: phkResult=0x4fe59c*=0x578) returned 0x0 [0128.985] RegQueryValueExW (in: hKey=0x578, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x4fe5b8, lpData=0x0, lpcbData=0x4fe5b4*=0x0 | out: lpType=0x4fe5b8*=0x0, lpData=0x0, lpcbData=0x4fe5b4*=0x0) returned 0x2 [0128.985] RegCloseKey (hKey=0x578) returned 0x0 [0128.989] GetCurrentProcessId () returned 0x1028 [0128.997] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x4fde34 | out: lpLuid=0x4fde34*(LowPart=0x14, HighPart=0)) returned 1 [0128.999] GetCurrentProcess () returned 0xffffffff [0128.999] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x4fde30 | out: TokenHandle=0x4fde30*=0x5b0) returned 1 [0129.000] AdjustTokenPrivileges (in: TokenHandle=0x5b0, DisableAllPrivileges=0, NewState=0x2480674*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0129.000] CloseHandle (hObject=0x5b0) returned 1 [0129.002] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1028) returned 0x5b0 [0129.106] EnumProcessModules (in: hProcess=0x5b0, lphModule=0x24806b8, cb=0x100, lpcbNeeded=0x4fe5a4 | out: lphModule=0x24806b8, lpcbNeeded=0x4fe5a4) returned 1 [0129.106] EnumProcessModules (in: hProcess=0x5b0, lphModule=0x24807c4, cb=0x200, lpcbNeeded=0x4fe5a4 | out: lphModule=0x24807c4, lpcbNeeded=0x4fe5a4) returned 1 [0129.107] GetModuleInformation (in: hProcess=0x5b0, hModule=0xb0000, lpmodinfo=0x2480a04, cb=0xc | out: lpmodinfo=0x2480a04*(lpBaseOfDll=0xb0000, SizeOfImage=0x3a000, EntryPoint=0x0)) returned 1 [0129.107] CoTaskMemAlloc (cb=0x804) returned 0x76a2370 [0129.107] GetModuleBaseNameW (in: hProcess=0x5b0, hModule=0xb0000, lpBaseName=0x76a2370, nSize=0x800 | out: lpBaseName="software-launcher.exe") returned 0x15 [0129.107] CoTaskMemFree (pv=0x76a2370) [0129.108] CoTaskMemAlloc (cb=0x804) returned 0x76a2370 [0129.108] GetModuleFileNameExW (in: hProcess=0x5b0, hModule=0xb0000, lpFilename=0x76a2370, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\software-launcher.exe")) returned 0x2d [0129.108] CoTaskMemFree (pv=0x76a2370) [0129.108] CloseHandle (hObject=0x5b0) returned 1 [0129.109] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", nBufferLength=0x105, lpBuffer=0x4fe0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", lpFilePart=0x0) returned 0x2d [0129.110] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SchSendAuxRecord", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe59c | out: phkResult=0x4fe59c*=0x0) returned 0x2 [0129.110] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe59c | out: phkResult=0x4fe59c*=0x5b0) returned 0x0 [0129.110] RegQueryValueExW (in: hKey=0x5b0, lpValueName="SchSendAuxRecord", lpReserved=0x0, lpType=0x4fe5b8, lpData=0x0, lpcbData=0x4fe5b4*=0x0 | out: lpType=0x4fe5b8*=0x0, lpData=0x0, lpcbData=0x4fe5b4*=0x0) returned 0x2 [0129.110] RegCloseKey (hKey=0x5b0) returned 0x0 [0129.110] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe59c | out: phkResult=0x4fe59c*=0x5b0) returned 0x0 [0129.111] RegQueryValueExW (in: hKey=0x5b0, lpValueName="SystemDefaultTlsVersions", lpReserved=0x0, lpType=0x4fe5b8, lpData=0x0, lpcbData=0x4fe5b4*=0x0 | out: lpType=0x4fe5b8*=0x0, lpData=0x0, lpcbData=0x4fe5b4*=0x0) returned 0x2 [0129.111] RegCloseKey (hKey=0x5b0) returned 0x0 [0129.116] GetCurrentProcessId () returned 0x1028 [0129.116] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1028) returned 0x5b0 [0129.116] EnumProcessModules (in: hProcess=0x5b0, lphModule=0x24836ac, cb=0x100, lpcbNeeded=0x4fe59c | out: lphModule=0x24836ac, lpcbNeeded=0x4fe59c) returned 1 [0129.117] EnumProcessModules (in: hProcess=0x5b0, lphModule=0x24837b8, cb=0x200, lpcbNeeded=0x4fe59c | out: lphModule=0x24837b8, lpcbNeeded=0x4fe59c) returned 1 [0129.117] GetModuleInformation (in: hProcess=0x5b0, hModule=0xb0000, lpmodinfo=0x24839f8, cb=0xc | out: lpmodinfo=0x24839f8*(lpBaseOfDll=0xb0000, SizeOfImage=0x3a000, EntryPoint=0x0)) returned 1 [0129.117] CoTaskMemAlloc (cb=0x804) returned 0x76a2370 [0129.117] GetModuleBaseNameW (in: hProcess=0x5b0, hModule=0xb0000, lpBaseName=0x76a2370, nSize=0x800 | out: lpBaseName="software-launcher.exe") returned 0x15 [0129.117] CoTaskMemFree (pv=0x76a2370) [0129.117] CoTaskMemAlloc (cb=0x804) returned 0x76a2370 [0129.117] GetModuleFileNameExW (in: hProcess=0x5b0, hModule=0xb0000, lpFilename=0x76a2370, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\software-launcher.exe")) returned 0x2d [0129.117] CoTaskMemFree (pv=0x76a2370) [0129.117] CloseHandle (hObject=0x5b0) returned 1 [0129.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", nBufferLength=0x105, lpBuffer=0x4fe098, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\software-launcher.exe", lpFilePart=0x0) returned 0x2d [0129.117] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.RequireCertificateEKUs", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe594 | out: phkResult=0x4fe594*=0x0) returned 0x2 [0129.118] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fe594 | out: phkResult=0x4fe594*=0x5b0) returned 0x0 [0129.118] RegQueryValueExW (in: hKey=0x5b0, lpValueName="RequireCertificateEKUs", lpReserved=0x0, lpType=0x4fe5b0, lpData=0x0, lpcbData=0x4fe5ac*=0x0 | out: lpType=0x4fe5b0*=0x0, lpData=0x0, lpcbData=0x4fe5ac*=0x0) returned 0x2 [0129.118] RegCloseKey (hKey=0x5b0) returned 0x0 [0129.123] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x78fd00 [0130.253] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x78fd00, dwGroupId=0x0) returned 0x0 [0130.352] LocalFree (hMem=0x78fd00) returned 0x0 [0130.352] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x76a5610 [0130.353] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x76a5610, dwGroupId=0x0) returned 0x0 [0130.353] LocalFree (hMem=0x76a5610) returned 0x0 [0130.815] EnumerateSecurityPackagesW (in: pcPackages=0x4fe5d8, ppPackageInfo=0x4fe56c | out: pcPackages=0x4fe5d8, ppPackageInfo=0x4fe56c) returned 0x0 [0130.887] FreeContextBuffer (in: pvContextBuffer=0x76adc50 | out: pvContextBuffer=0x76adc50) returned 0x0 [0130.899] GetCurrentProcess () returned 0xffffffff [0130.899] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fe39c | out: TokenHandle=0x4fe39c*=0x5c8) returned 1 [0130.902] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x24860dc, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x4fe3f0, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x2487888, ptsExpiry=0x4fe374 | out: phCredential=0x2487888, ptsExpiry=0x4fe374) returned 0x0 [0132.656] InitializeSecurityContextW (in: phCredential=0x4fe3b0, phContext=0x0, pTargetName=0x247d880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x2487a8c, pOutput=0x2487a24, pfContextAttr=0x24860b0, ptsExpiry=0x4fe3a8 | out: phNewContext=0x2487a8c, pOutput=0x2487a24, pfContextAttr=0x24860b0, ptsExpiry=0x4fe3a8) returned 0x90312 [0132.657] FreeContextBuffer (in: pvContextBuffer=0x768fa00 | out: pvContextBuffer=0x768fa00) returned 0x0 [0132.662] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000 [0132.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="AppPolicyGetClrCompat", cchWideChar=21, lpMultiByteStr=0x4fe3f0, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AppPolicyGetClrCompatãâq", lpUsedDefaultChar=0x0) returned 21 [0132.662] GetProcAddress (hModule=0x772d0000, lpProcName="AppPolicyGetClrCompat") returned 0x74c968b0 [0132.668] AppPolicyGetClrCompat () returned 0x0 [0132.671] send (s=0x5a0, buf=0x2487aa0*, len=122, flags=0) returned 122 [0132.674] recv (in: s=0x5a0, buf=0x2487aa0, len=5, flags=0 | out: buf=0x2487aa0*) returned 5 [0132.700] recv (in: s=0x5a0, buf=0x2487aa5, len=63, flags=0 | out: buf=0x2487aa5*) returned 63 [0132.701] InitializeSecurityContextW (in: phCredential=0x4fe308, phContext=0x4fe398, pTargetName=0x247d880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2487e78, Reserved2=0x0, phNewContext=0x2487a8c, pOutput=0x2487e8c, pfContextAttr=0x24860b0, ptsExpiry=0x4fe300 | out: phNewContext=0x2487a8c, pOutput=0x2487e8c, pfContextAttr=0x24860b0, ptsExpiry=0x4fe300) returned 0x90312 [0132.702] recv (in: s=0x5a0, buf=0x2487f1c, len=5, flags=0 | out: buf=0x2487f1c*) returned 5 [0132.702] recv (in: s=0x5a0, buf=0x2487f35, len=2343, flags=0 | out: buf=0x2487f35*) returned 2343 [0132.702] InitializeSecurityContextW (in: phCredential=0x4fe264, phContext=0x4fe2f4, pTargetName=0x247d880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24888cc, Reserved2=0x0, phNewContext=0x2487a8c, pOutput=0x24888e0, pfContextAttr=0x24860b0, ptsExpiry=0x4fe25c | out: phNewContext=0x2487a8c, pOutput=0x24888e0, pfContextAttr=0x24860b0, ptsExpiry=0x4fe25c) returned 0x90312 [0132.709] recv (in: s=0x5a0, buf=0x2488970, len=5, flags=0 | out: buf=0x2488970*) returned 5 [0132.710] recv (in: s=0x5a0, buf=0x2488989, len=113, flags=0 | out: buf=0x2488989*) returned 113 [0132.710] InitializeSecurityContextW (in: phCredential=0x4fe1c0, phContext=0x4fe250, pTargetName=0x247d880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2488a6c, Reserved2=0x0, phNewContext=0x2487a8c, pOutput=0x2488a80, pfContextAttr=0x24860b0, ptsExpiry=0x4fe1b8 | out: phNewContext=0x2487a8c, pOutput=0x2488a80, pfContextAttr=0x24860b0, ptsExpiry=0x4fe1b8) returned 0x90312 [0132.710] recv (in: s=0x5a0, buf=0x2488b10, len=5, flags=0 | out: buf=0x2488b10*) returned 5 [0132.710] recv (in: s=0x5a0, buf=0x2488b29, len=4, flags=0 | out: buf=0x2488b29*) returned 4 [0132.710] InitializeSecurityContextW (in: phCredential=0x4fe11c, phContext=0x4fe1ac, pTargetName=0x247d880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2488ba0, Reserved2=0x0, phNewContext=0x2487a8c, pOutput=0x2488bb4, pfContextAttr=0x24860b0, ptsExpiry=0x4fe114 | out: phNewContext=0x2487a8c, pOutput=0x2488bb4, pfContextAttr=0x24860b0, ptsExpiry=0x4fe114) returned 0x90312 [0132.867] FreeContextBuffer (in: pvContextBuffer=0x791700 | out: pvContextBuffer=0x791700) returned 0x0 [0132.867] send (s=0x5a0, buf=0x2488c30*, len=101, flags=0) returned 101 [0132.868] recv (in: s=0x5a0, buf=0x2488c30, len=5, flags=0 | out: buf=0x2488c30*) returned 5 [0132.883] recv (in: s=0x5a0, buf=0x2488cbd, len=236, flags=0 | out: buf=0x2488cbd*) returned 236 [0132.883] InitializeSecurityContextW (in: phCredential=0x4fe078, phContext=0x4fe108, pTargetName=0x247d880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2488e1c, Reserved2=0x0, phNewContext=0x2487a8c, pOutput=0x2488e30, pfContextAttr=0x24860b0, ptsExpiry=0x4fe070 | out: phNewContext=0x2487a8c, pOutput=0x2488e30, pfContextAttr=0x24860b0, ptsExpiry=0x4fe070) returned 0x90312 [0132.889] recv (in: s=0x5a0, buf=0x2488ec0, len=5, flags=0 | out: buf=0x2488ec0*) returned 5 [0132.889] recv (in: s=0x5a0, buf=0x2488ed9, len=1, flags=0 | out: buf=0x2488ed9*) returned 1 [0132.889] InitializeSecurityContextW (in: phCredential=0x4fdfd4, phContext=0x4fe064, pTargetName=0x247d880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2488f4c, Reserved2=0x0, phNewContext=0x2487a8c, pOutput=0x2488f60, pfContextAttr=0x24860b0, ptsExpiry=0x4fdfcc | out: phNewContext=0x2487a8c, pOutput=0x2488f60, pfContextAttr=0x24860b0, ptsExpiry=0x4fdfcc) returned 0x90312 [0132.890] recv (in: s=0x5a0, buf=0x2488ff0, len=5, flags=0 | out: buf=0x2488ff0*) returned 5 [0132.890] recv (in: s=0x5a0, buf=0x2489009, len=48, flags=0 | out: buf=0x2489009*) returned 48 [0132.890] InitializeSecurityContextW (in: phCredential=0x4fdf30, phContext=0x4fdfc0, pTargetName=0x247d880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24890ac, Reserved2=0x0, phNewContext=0x2487a8c, pOutput=0x24890c0, pfContextAttr=0x24860b0, ptsExpiry=0x4fdf28 | out: phNewContext=0x2487a8c, pOutput=0x24890c0, pfContextAttr=0x24860b0, ptsExpiry=0x4fdf28) returned 0x0 [0134.672] QueryContextAttributesW (in: phContext=0x2487a8c, ulAttribute=0x4, pBuffer=0x248916c | out: pBuffer=0x248916c) returned 0x0 [0134.672] QueryContextAttributesW (in: phContext=0x2487a8c, ulAttribute=0x5a, pBuffer=0x24891c4 | out: pBuffer=0x24891c4) returned 0x0 [0134.674] QueryContextAttributesW (in: phContext=0x2487a8c, ulAttribute=0x53, pBuffer=0x2489270 | out: pBuffer=0x2489270) returned 0x0 [0134.694] CertDuplicateCertificateContext (pCertContext=0x76ad6f8) returned 0x76ad6f8 [0134.695] CertDuplicateStore (hCertStore=0x76a4fe0) returned 0x76a4fe0 [0134.696] CertEnumCertificatesInStore (hCertStore=0x76a4fe0, pPrevCertContext=0x0) returned 0x76adb58 [0134.696] CertDuplicateCertificateContext (pCertContext=0x76adb58) returned 0x76adb58 [0134.696] CertEnumCertificatesInStore (hCertStore=0x76a4fe0, pPrevCertContext=0x76adb58) returned 0x76ad6f8 [0134.696] CertDuplicateCertificateContext (pCertContext=0x76ad6f8) returned 0x76ad6f8 [0134.696] CertEnumCertificatesInStore (hCertStore=0x76a4fe0, pPrevCertContext=0x76ad6f8) returned 0x0 [0134.696] CertCloseStore (hCertStore=0x76a4fe0, dwFlags=0x0) returned 1 [0134.697] CertFreeCertificateContext (pCertContext=0x76ad6f8) returned 1 [0134.717] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x76a5490 [0134.751] CertAddCRLLinkToStore (in: hCertStore=0x76a5490, pCrlContext=0x76adb58, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0134.755] CertAddCRLLinkToStore (in: hCertStore=0x76a5490, pCrlContext=0x76ad6f8, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0134.756] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x76b28a0 [0134.760] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x76ad6f8, pTime=0x4fdf40, hAdditionalStore=0x76a5490, pChainPara=0x4fde80, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x4fde74 | out: ppChainContext=0x4fde74) returned 1 [0134.771] LocalFree (hMem=0x76b28a0) returned 0x0 [0134.771] CertDuplicateCertificateChain (pChainContext=0x76b3e18) returned 0x76b3e18 [0134.772] CertDuplicateCertificateContext (pCertContext=0x76ad6f8) returned 0x76ad6f8 [0134.772] CertDuplicateCertificateContext (pCertContext=0x76ad8d8) returned 0x76ad8d8 [0134.772] CertDuplicateCertificateContext (pCertContext=0x76ad978) returned 0x76ad978 [0134.772] CertFreeCertificateChain (pChainContext=0x76b3e18) [0134.773] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x76b3e18, pPolicyPara=0x4fe020, pPolicyStatus=0x4fe00c | out: pPolicyStatus=0x4fe00c) returned 1 [0134.774] SetLastError (dwErrCode=0x0) [0134.776] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x76b3e18, pPolicyPara=0x4fe080, pPolicyStatus=0x4fe034 | out: pPolicyStatus=0x4fe034) returned 1 [0134.781] CertFreeCertificateChain (pChainContext=0x76b3e18) [0134.781] CertFreeCertificateContext (pCertContext=0x76ad6f8) returned 1 [0134.785] CoTaskMemAlloc (cb=0x20c) returned 0x76b3e18 [0134.785] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x76b3e18, nSize=0x104 | out: lpBuffer="깰{軰ݫĀ") returned 0x0 [0134.785] CoTaskMemFree (pv=0x76b3e18) [0134.785] CoTaskMemAlloc (cb=0x20c) returned 0x76b3e18 [0134.785] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x76b3e18, nSize=0x104 | out: lpBuffer="깰{軰ݫĀ") returned 0x0 [0134.786] CoTaskMemFree (pv=0x76b3e18) [0134.786] CoTaskMemAlloc (cb=0x20c) returned 0x76b3e18 [0134.786] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x76b3e18, nSize=0x104 | out: lpBuffer="깰{軰ݫĀ") returned 0x0 [0134.786] CoTaskMemFree (pv=0x76b3e18) [0134.786] CoTaskMemAlloc (cb=0x20c) returned 0x76b3e18 [0134.786] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x76b3e18, nSize=0x104 | out: lpBuffer="깰{軰ݫĀ") returned 0x0 [0134.786] CoTaskMemFree (pv=0x76b3e18) [0134.787] EncryptMessage (in: phContext=0x2487a8c, fQOP=0x0, pMessage=0x24913a4, MessageSeqNo=0x0 | out: pMessage=0x24913a4) returned 0x0 [0134.802] send (s=0x5a0, buf=0x248fe7c*, len=138, flags=0) returned 138 [0134.804] setsockopt (s=0x5a0, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0134.804] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.868] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.869] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a1774, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a1774, pfQOP=0x0) returned 0x0 [0134.881] setsockopt (s=0x5a0, level=65535, optname=4102, optval="ô\x01", optlen=4) returned 0 [0134.882] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe920 | out: lpPerformanceCount=0x4fe920*=23018132533) returned 1 [0134.882] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23018139361) returned 1 [0134.896] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.896] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.897] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a53a0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a53a0, pfQOP=0x0) returned 0x0 [0134.897] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23019711573) returned 1 [0134.898] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.898] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.898] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a54c0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a54c0, pfQOP=0x0) returned 0x0 [0134.898] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23019770854) returned 1 [0134.898] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.898] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.898] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a55e0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a55e0, pfQOP=0x0) returned 0x0 [0134.898] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23019808504) returned 1 [0134.898] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.899] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.899] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a5700, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a5700, pfQOP=0x0) returned 0x0 [0134.899] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23019844464) returned 1 [0134.899] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.899] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.899] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a5820, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a5820, pfQOP=0x0) returned 0x0 [0134.899] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23019881200) returned 1 [0134.899] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.899] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.899] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a5940, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a5940, pfQOP=0x0) returned 0x0 [0134.899] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23019918809) returned 1 [0134.900] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.900] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.900] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a5a60, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a5a60, pfQOP=0x0) returned 0x0 [0134.900] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23019953485) returned 1 [0134.900] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.900] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.900] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a5b80, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a5b80, pfQOP=0x0) returned 0x0 [0134.900] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23019988811) returned 1 [0134.900] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.900] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.900] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a5ca0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a5ca0, pfQOP=0x0) returned 0x0 [0134.901] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23020024848) returned 1 [0134.931] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.931] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.931] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a5dc0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a5dc0, pfQOP=0x0) returned 0x0 [0134.931] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023106512) returned 1 [0134.931] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.931] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.932] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a5ee0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a5ee0, pfQOP=0x0) returned 0x0 [0134.932] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023140156) returned 1 [0134.932] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.932] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.932] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a6000, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a6000, pfQOP=0x0) returned 0x0 [0134.932] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023173487) returned 1 [0134.932] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.932] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.932] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a6120, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a6120, pfQOP=0x0) returned 0x0 [0134.932] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023207050) returned 1 [0134.932] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.932] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.933] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a6240, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a6240, pfQOP=0x0) returned 0x0 [0134.933] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023247867) returned 1 [0134.933] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.933] recv (in: s=0x5a0, buf=0x249d6b9, len=1136, flags=0 | out: buf=0x249d6b9*) returned 1136 [0134.933] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a6360, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a6360, pfQOP=0x0) returned 0x0 [0134.933] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023290708) returned 1 [0134.933] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.934] recv (in: s=0x5a0, buf=0x249d6b9, len=208, flags=0 | out: buf=0x249d6b9*) returned 208 [0134.934] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a6480, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a6480, pfQOP=0x0) returned 0x0 [0134.934] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023350194) returned 1 [0134.934] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.934] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.934] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a65a0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a65a0, pfQOP=0x0) returned 0x0 [0134.934] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023390938) returned 1 [0134.934] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.934] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.934] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a66c0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a66c0, pfQOP=0x0) returned 0x0 [0134.935] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023423569) returned 1 [0134.935] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.935] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.935] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a67e0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a67e0, pfQOP=0x0) returned 0x0 [0134.935] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023456767) returned 1 [0134.935] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.935] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.935] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a6900, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a6900, pfQOP=0x0) returned 0x0 [0134.935] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023499899) returned 1 [0134.935] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.935] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.936] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a6a20, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a6a20, pfQOP=0x0) returned 0x0 [0134.936] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023533502) returned 1 [0134.936] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.936] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.936] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a6b40, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a6b40, pfQOP=0x0) returned 0x0 [0134.936] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023567694) returned 1 [0134.936] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.936] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.936] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a6c60, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a6c60, pfQOP=0x0) returned 0x0 [0134.936] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023600754) returned 1 [0134.936] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.936] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.937] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a6d80, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a6d80, pfQOP=0x0) returned 0x0 [0134.937] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023633436) returned 1 [0134.937] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.937] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.937] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a6ea0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a6ea0, pfQOP=0x0) returned 0x0 [0134.937] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023666081) returned 1 [0134.937] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.937] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.937] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a6fc0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a6fc0, pfQOP=0x0) returned 0x0 [0134.937] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023700001) returned 1 [0134.937] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.937] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.938] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a70e0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a70e0, pfQOP=0x0) returned 0x0 [0134.938] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023734513) returned 1 [0134.938] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.938] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.938] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a7200, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a7200, pfQOP=0x0) returned 0x0 [0134.938] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023767297) returned 1 [0134.938] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.938] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.938] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a7320, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a7320, pfQOP=0x0) returned 0x0 [0134.938] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023800964) returned 1 [0134.938] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.938] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.939] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a7440, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a7440, pfQOP=0x0) returned 0x0 [0134.939] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023835533) returned 1 [0134.939] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.939] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.939] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a7560, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a7560, pfQOP=0x0) returned 0x0 [0134.939] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023868569) returned 1 [0134.939] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.939] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.939] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a7680, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a7680, pfQOP=0x0) returned 0x0 [0134.939] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023901496) returned 1 [0134.939] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.939] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.940] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a77a0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a77a0, pfQOP=0x0) returned 0x0 [0134.940] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023935527) returned 1 [0134.940] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.940] recv (in: s=0x5a0, buf=0x249d6b9, len=1424, flags=0 | out: buf=0x249d6b9*) returned 1424 [0134.940] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a78c0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a78c0, pfQOP=0x0) returned 0x0 [0134.940] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023967804) returned 1 [0134.940] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.940] recv (in: s=0x5a0, buf=0x249d6b9, len=992, flags=0 | out: buf=0x249d6b9*) returned 992 [0134.940] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a79e0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a79e0, pfQOP=0x0) returned 0x0 [0134.940] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8e8 | out: lpPerformanceCount=0x4fe8e8*=23023999773) returned 1 [0134.940] recv (in: s=0x5a0, buf=0x249d6b4, len=5, flags=0 | out: buf=0x249d6b4*) returned 5 [0134.940] recv (in: s=0x5a0, buf=0x249d6b9, len=32, flags=0 | out: buf=0x249d6b9*) returned 32 [0134.941] DecryptMessage (in: phContext=0x2487a8c, pMessage=0x24a7b00, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x24a7b00, pfQOP=0x0) returned 0x0 [0134.941] SetEvent (hEvent=0x2d4) returned 1 [0134.941] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe90c | out: lpPerformanceCount=0x4fe90c*=23024063099) returned 1 [0134.984] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\hi.jpg", nBufferLength=0x105, lpBuffer=0x4fe36c, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\hi.jpg", lpFilePart=0x0) returned 0x10 [0134.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fe8b0) returned 1 [0134.984] CreateFileW (lpFileName="C:\\FD1HVy\\hi.jpg" (normalized: "c:\\fd1hvy\\hi.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0134.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fcc50) returned 1 [0135.024] QueryPerformanceCounter (in: lpPerformanceCount=0x4fe8f8 | out: lpPerformanceCount=0x4fe8f8*=23032371558) returned 1 [0135.024] SetEvent (hEvent=0x2d4) returned 1 [0135.025] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe700*=0x498, lpdwindex=0x4fe51c | out: lpdwindex=0x4fe51c) returned 0x80010115 [0135.026] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe6e0*=0x488, lpdwindex=0x4fe4fc | out: lpdwindex=0x4fe4fc) returned 0x80010115 [0135.026] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe6e0*=0x490, lpdwindex=0x4fe4fc | out: lpdwindex=0x4fe4fc) returned 0x80010115 [0135.027] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe734*=0x4b8, lpdwindex=0x4fe554 | out: lpdwindex=0x4fe554) returned 0x80010115 [0135.027] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe734*=0x4c0, lpdwindex=0x4fe554 | out: lpdwindex=0x4fe554) returned 0x80010115 [0135.028] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe734*=0x4c8, lpdwindex=0x4fe554 | out: lpdwindex=0x4fe554) returned 0x80010115 [0135.029] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6a4 [0135.033] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6ac [0135.034] GetAddrInfoW (in: pNodeName="enfiniql2buev6o.m.pipedream.net", pServiceName=0x0, pHints=0x4fe634*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x4fe5dc | out: ppResult=0x4fe5dc*=0x76ab508*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="enfiniql2buev6o.m.pipedream.net", ai_addr=0x76ae500*(sa_family=2, sin_port=0x0, sin_addr="54.146.242.158"), ai_next=0x76ab350*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x76ae518*(sa_family=2, sin_port=0x0, sin_addr="35.168.136.85"), ai_next=0x76ab558*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x76ae530*(sa_family=2, sin_port=0x0, sin_addr="52.1.216.242"), ai_next=0x76ab1e8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x76ae548*(sa_family=2, sin_port=0x0, sin_addr="54.210.137.220"), ai_next=0x76ab288*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x76ae560*(sa_family=2, sin_port=0x0, sin_addr="54.210.116.43"), ai_next=0x76ab238*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x76ae290*(sa_family=2, sin_port=0x0, sin_addr="52.20.135.248"), ai_next=0x0))))))) returned 0 [0135.047] FreeAddrInfoW (pAddrInfo=0x76ab508*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="enfiniql2buev6o.m.pipedream.net", ai_addr=0x76ae500*(sa_family=2, sin_port=0x0, sin_addr="54.146.242.158"), ai_next=0x76ab350*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x76ae518*(sa_family=2, sin_port=0x0, sin_addr="35.168.136.85"), ai_next=0x76ab558*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x76ae530*(sa_family=2, sin_port=0x0, sin_addr="52.1.216.242"), ai_next=0x76ab1e8*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x76ae548*(sa_family=2, sin_port=0x0, sin_addr="54.210.137.220"), ai_next=0x76ab288*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x76ae560*(sa_family=2, sin_port=0x0, sin_addr="54.210.116.43"), ai_next=0x76ab238*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x76ae290*(sa_family=2, sin_port=0x0, sin_addr="52.20.135.248"), ai_next=0x0))))))) [0135.048] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe578*=0x5b4, lpdwindex=0x4fe394 | out: lpdwindex=0x4fe394) returned 0x80010115 [0135.048] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x4fe578*=0x5bc, lpdwindex=0x4fe394 | out: lpdwindex=0x4fe394) returned 0x80010115 [0135.049] WSAConnect (in: s=0x6a4, name=0x24c3c54*(sa_family=2, sin_port=0x1bb, sin_addr="54.146.242.158"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0135.255] closesocket (s=0x6ac) returned 0 [0135.258] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x76aeea0 [0135.258] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x76aeea0, dwGroupId=0x0) returned 0x0 [0135.258] LocalFree (hMem=0x76aeea0) returned 0x0 [0135.258] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x76af1a0 [0135.259] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x76af1a0, dwGroupId=0x0) returned 0x0 [0135.259] LocalFree (hMem=0x76af1a0) returned 0x0 [0135.259] InitializeSecurityContextW (in: phCredential=0x4fe354, phContext=0x0, pTargetName=0x24c3cc4, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x24c4ea8, pOutput=0x24c4e40, pfContextAttr=0x24c4c88, ptsExpiry=0x4fe34c | out: phNewContext=0x24c4ea8, pOutput=0x24c4e40, pfContextAttr=0x24c4c88, ptsExpiry=0x4fe34c) returned 0x90312 [0135.268] FreeContextBuffer (in: pvContextBuffer=0x7864c0 | out: pvContextBuffer=0x7864c0) returned 0x0 [0135.268] send (s=0x6a4, buf=0x24c4ebc*, len=139, flags=0) returned 139 [0135.269] recv (in: s=0x6a4, buf=0x24c4ebc, len=5, flags=0 | out: buf=0x24c4ebc*) returned 5 [0135.439] recv (in: s=0x6a4, buf=0x24c4ec1, len=61, flags=0 | out: buf=0x24c4ec1*) returned 61 [0135.439] InitializeSecurityContextW (in: phCredential=0x4fe2ac, phContext=0x4fe33c, pTargetName=0x24c3cc4, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24c4fcc, Reserved2=0x0, phNewContext=0x24c4ea8, pOutput=0x24c4fe0, pfContextAttr=0x24c4c88, ptsExpiry=0x4fe2a4 | out: phNewContext=0x24c4ea8, pOutput=0x24c4fe0, pfContextAttr=0x24c4c88, ptsExpiry=0x4fe2a4) returned 0x90312 [0135.440] recv (in: s=0x6a4, buf=0x24c5070, len=5, flags=0 | out: buf=0x24c5070*) returned 5 [0135.440] recv (in: s=0x6a4, buf=0x24c5089, len=4830, flags=0 | out: buf=0x24c5089*) returned 4830 [0135.440] InitializeSecurityContextW (in: phCredential=0x4fe208, phContext=0x4fe298, pTargetName=0x24c3cc4, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24c63d8, Reserved2=0x0, phNewContext=0x24c4ea8, pOutput=0x24c63ec, pfContextAttr=0x24c4c88, ptsExpiry=0x4fe200 | out: phNewContext=0x24c4ea8, pOutput=0x24c63ec, pfContextAttr=0x24c4c88, ptsExpiry=0x4fe200) returned 0x90312 [0135.443] recv (in: s=0x6a4, buf=0x24c647c, len=5, flags=0 | out: buf=0x24c647c*) returned 5 [0135.443] recv (in: s=0x6a4, buf=0x24c6495, len=331, flags=0 | out: buf=0x24c6495*) returned 331 [0135.443] InitializeSecurityContextW (in: phCredential=0x4fe164, phContext=0x4fe1f4, pTargetName=0x24c3cc4, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24c6650, Reserved2=0x0, phNewContext=0x24c4ea8, pOutput=0x24c6664, pfContextAttr=0x24c4c88, ptsExpiry=0x4fe15c | out: phNewContext=0x24c4ea8, pOutput=0x24c6664, pfContextAttr=0x24c4c88, ptsExpiry=0x4fe15c) returned 0x90312 [0135.444] recv (in: s=0x6a4, buf=0x24c66f4, len=5, flags=0 | out: buf=0x24c66f4*) returned 5 [0135.444] recv (in: s=0x6a4, buf=0x24c670d, len=4, flags=0 | out: buf=0x24c670d*) returned 4 [0135.444] InitializeSecurityContextW (in: phCredential=0x4fe0c0, phContext=0x4fe150, pTargetName=0x24c3cc4, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24c6784, Reserved2=0x0, phNewContext=0x24c4ea8, pOutput=0x24c6798, pfContextAttr=0x24c4c88, ptsExpiry=0x4fe0b8 | out: phNewContext=0x24c4ea8, pOutput=0x24c6798, pfContextAttr=0x24c4c88, ptsExpiry=0x4fe0b8) returned 0x90312 [0135.681] FreeContextBuffer (in: pvContextBuffer=0x7ec838 | out: pvContextBuffer=0x7ec838) returned 0x0 [0135.681] send (s=0x6a4, buf=0x24c6814*, len=134, flags=0) returned 134 [0135.681] recv (in: s=0x6a4, buf=0x24c6814, len=5, flags=0 | out: buf=0x24c6814*) returned 5 [0135.845] recv (in: s=0x6a4, buf=0x24c68c1, len=218, flags=0 | out: buf=0x24c68c1*) returned 218 [0135.846] InitializeSecurityContextW (in: phCredential=0x4fe01c, phContext=0x4fe0ac, pTargetName=0x24c3cc4, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24c6a0c, Reserved2=0x0, phNewContext=0x24c4ea8, pOutput=0x24c6a20, pfContextAttr=0x24c4c88, ptsExpiry=0x4fe014 | out: phNewContext=0x24c4ea8, pOutput=0x24c6a20, pfContextAttr=0x24c4c88, ptsExpiry=0x4fe014) returned 0x90312 [0135.846] recv (in: s=0x6a4, buf=0x24c6ab0, len=5, flags=0 | out: buf=0x24c6ab0*) returned 5 [0135.846] recv (in: s=0x6a4, buf=0x24c6ac9, len=1, flags=0 | out: buf=0x24c6ac9*) returned 1 [0135.846] InitializeSecurityContextW (in: phCredential=0x4fdf78, phContext=0x4fe008, pTargetName=0x24c3cc4, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24c6b3c, Reserved2=0x0, phNewContext=0x24c4ea8, pOutput=0x24c6b50, pfContextAttr=0x24c4c88, ptsExpiry=0x4fdf70 | out: phNewContext=0x24c4ea8, pOutput=0x24c6b50, pfContextAttr=0x24c4c88, ptsExpiry=0x4fdf70) returned 0x90312 [0135.847] recv (in: s=0x6a4, buf=0x24c6be0, len=5, flags=0 | out: buf=0x24c6be0*) returned 5 [0135.847] recv (in: s=0x6a4, buf=0x24c6bf9, len=48, flags=0 | out: buf=0x24c6bf9*) returned 48 [0135.847] InitializeSecurityContextW (in: phCredential=0x4fded4, phContext=0x4fdf64, pTargetName=0x24c3cc4, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x24c6c9c, Reserved2=0x0, phNewContext=0x24c4ea8, pOutput=0x24c6cb0, pfContextAttr=0x24c4c88, ptsExpiry=0x4fdecc | out: phNewContext=0x24c4ea8, pOutput=0x24c6cb0, pfContextAttr=0x24c4c88, ptsExpiry=0x4fdecc) returned 0x0 [0135.849] QueryContextAttributesW (in: phContext=0x24c4ea8, ulAttribute=0x4, pBuffer=0x24c6d40 | out: pBuffer=0x24c6d40) returned 0x0 [0135.849] QueryContextAttributesW (in: phContext=0x24c4ea8, ulAttribute=0x5a, pBuffer=0x24c6d7c | out: pBuffer=0x24c6d7c) returned 0x0 [0135.849] QueryContextAttributesW (in: phContext=0x24c4ea8, ulAttribute=0x53, pBuffer=0x24c6dc8 | out: pBuffer=0x24c6dc8) returned 0x0 [0135.849] CertDuplicateCertificateContext (pCertContext=0x76ad7e8) returned 0x76ad7e8 [0135.849] CertDuplicateStore (hCertStore=0x76b3110) returned 0x76b3110 [0135.850] CertEnumCertificatesInStore (hCertStore=0x76b3110, pPrevCertContext=0x0) returned 0x76ada68 [0135.850] CertDuplicateCertificateContext (pCertContext=0x76ada68) returned 0x76ada68 [0135.850] CertEnumCertificatesInStore (hCertStore=0x76b3110, pPrevCertContext=0x76ada68) returned 0x76ad9c8 [0135.850] CertDuplicateCertificateContext (pCertContext=0x76ad9c8) returned 0x76ad9c8 [0135.850] CertEnumCertificatesInStore (hCertStore=0x76b3110, pPrevCertContext=0x76ad9c8) returned 0x76ad928 [0135.850] CertDuplicateCertificateContext (pCertContext=0x76ad928) returned 0x76ad928 [0135.850] CertEnumCertificatesInStore (hCertStore=0x76b3110, pPrevCertContext=0x76ad928) returned 0x76ad7e8 [0135.850] CertDuplicateCertificateContext (pCertContext=0x76ad7e8) returned 0x76ad7e8 [0135.850] CertEnumCertificatesInStore (hCertStore=0x76b3110, pPrevCertContext=0x76ad7e8) returned 0x0 [0135.850] CertCloseStore (hCertStore=0x76b3110, dwFlags=0x0) returned 1 [0135.850] CertFreeCertificateContext (pCertContext=0x76ad7e8) returned 1 [0135.851] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x76b3020 [0135.851] CertAddCRLLinkToStore (in: hCertStore=0x76b3020, pCrlContext=0x76ada68, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0135.851] CertAddCRLLinkToStore (in: hCertStore=0x76b3020, pCrlContext=0x76ad9c8, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0135.851] CertAddCRLLinkToStore (in: hCertStore=0x76b3020, pCrlContext=0x76ad928, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0135.851] CertAddCRLLinkToStore (in: hCertStore=0x76b3020, pCrlContext=0x76ad7e8, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0135.851] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x76b22a0 [0135.851] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x76ad7e8, pTime=0x4fdee4, hAdditionalStore=0x76b3020, pChainPara=0x4fde24, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x4fde18 | out: ppChainContext=0x4fde18) returned 1 [0135.853] LocalFree (hMem=0x76b22a0) returned 0x0 [0135.853] CertDuplicateCertificateChain (pChainContext=0x7bf090) returned 0x7bf090 [0135.853] CertDuplicateCertificateContext (pCertContext=0x76ad7e8) returned 0x76ad7e8 [0135.853] CertDuplicateCertificateContext (pCertContext=0x76acd48) returned 0x76acd48 [0135.854] CertDuplicateCertificateContext (pCertContext=0x76ad068) returned 0x76ad068 [0135.854] CertFreeCertificateChain (pChainContext=0x7bf090) [0135.854] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x7bf090, pPolicyPara=0x4fdfc4, pPolicyStatus=0x4fdfb0 | out: pPolicyStatus=0x4fdfb0) returned 1 [0135.854] SetLastError (dwErrCode=0x0) [0135.854] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x7bf090, pPolicyPara=0x4fe024, pPolicyStatus=0x4fdfd8 | out: pPolicyStatus=0x4fdfd8) returned 1 [0135.854] CertFreeCertificateChain (pChainContext=0x7bf090) [0135.854] CertFreeCertificateContext (pCertContext=0x76ad7e8) returned 1 [0135.855] EncryptMessage (in: phContext=0x24c4ea8, fQOP=0x0, pMessage=0x24dc8a0, MessageSeqNo=0x0 | out: pMessage=0x24dc8a0) returned 0x0 [0135.855] send (s=0x6a4, buf=0x248ea64*, len=218, flags=0) returned 218 [0135.855] setsockopt (s=0x6a4, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0135.857] recv (in: s=0x6a4, buf=0x249967c, len=5, flags=0 | out: buf=0x249967c*) returned 5 [0136.043] recv (in: s=0x6a4, buf=0x2499681, len=464, flags=0 | out: buf=0x2499681*) returned 464 [0136.043] DecryptMessage (in: phContext=0x24c4ea8, pMessage=0x251cdc0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x251cdc0, pfQOP=0x0) returned 0x0 [0136.061] setsockopt (s=0x6a4, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0136.088] GetWindowThreadProcessId (in: hWnd=0x6002e, lpdwProcessId=0x4fea00 | out: lpdwProcessId=0x4fea00) returned 0x1024 [0136.088] GetCurrentThreadId () returned 0x1024 [0136.088] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc19f [0136.089] PostMessageW (hWnd=0x6002e, Msg=0xc19f, wParam=0x0, lParam=0x0) returned 1 [0136.089] GetWindowTextLengthW (hWnd=0x6002e) returned 11 [0136.090] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0136.090] GetSystemMetrics (nIndex=42) returned 0 [0136.090] GetWindowTextW (in: hWnd=0x6002e, lpString=0x4fe974, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0136.090] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xd, wParam=0xc, lParam=0x4fe974) returned 0xb [0136.098] OleInitialize (pvReserved=0x0) returned 0x0 [0136.099] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x4fef2c | out: lplpMessageFilter=0x4fef2c*=0x0) returned 0x0 [0136.100] PeekMessageW (in: lpMsg=0x4fef00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x4fef00) returned 1 [0136.100] IsWindowUnicode (hWnd=0x6002e) returned 1 [0136.101] GetMessageW (in: lpMsg=0x4fef00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x4fef00) returned 1 [0136.102] TranslateMessage (lpMsg=0x4fef00) returned 0 [0136.102] DispatchMessageW (lpMsg=0x4fef00) returned 0x0 [0136.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x46, wParam=0x0, lParam=0x4fec54) returned 0x0 [0136.103] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x83, wParam=0x1, lParam=0x4fec2c) returned 0x0 [0136.105] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0136.108] GetWindowPlacement (in: hWnd=0x6002e, lpwndpl=0x4fe99c | out: lpwndpl=0x4fe99c) returned 1 [0136.108] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe948 | out: lpRect=0x4fe948) returned 1 [0136.108] GetWindowTextLengthW (hWnd=0x6002e) returned 11 [0136.108] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0136.108] GetSystemMetrics (nIndex=42) returned 0 [0136.108] GetWindowTextW (in: hWnd=0x6002e, lpString=0x4fe808, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0136.108] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xd, wParam=0xc, lParam=0x4fe808) returned 0xb [0136.108] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe850 | out: lpRect=0x4fe850) returned 1 [0136.109] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0136.109] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0136.109] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x1b0507a4 [0136.109] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0136.109] SaveDC (hdc=0x60100ce) returned 1 [0136.109] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0 [0136.109] CreateSolidBrush (color=0xf0f0f0) returned 0x2010065f [0136.110] FillRect (hDC=0x60100ce, lprc=0x4fe6f0, hbr=0x2010065f) returned 1 [0136.110] DeleteObject (ho=0x2010065f) returned 1 [0136.110] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0136.115] GetWindowPlacement (in: hWnd=0x6002e, lpwndpl=0x4fe980 | out: lpwndpl=0x4fe980) returned 1 [0136.115] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x47, wParam=0x0, lParam=0x4fec54) returned 0x0 [0136.115] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe930 | out: lpRect=0x4fe930) returned 1 [0136.115] GetWindowRect (in: hWnd=0x6002e, lpRect=0x4fe930 | out: lpRect=0x4fe930) returned 1 [0136.116] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x83, wParam=0x1, lParam=0x4fe76c) returned 0x0 [0136.119] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0136.120] GetWindowPlacement (in: hWnd=0x6002e, lpwndpl=0x4fe4dc | out: lpwndpl=0x4fe4dc) returned 1 [0136.120] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe488 | out: lpRect=0x4fe488) returned 1 [0136.120] GetWindowTextLengthW (hWnd=0x6002e) returned 11 [0136.120] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0136.120] GetSystemMetrics (nIndex=42) returned 0 [0136.120] GetWindowTextW (in: hWnd=0x6002e, lpString=0x4fe348, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0136.120] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0xd, wParam=0xc, lParam=0x4fe348) returned 0xb [0136.120] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe390 | out: lpRect=0x4fe390) returned 1 [0136.120] GetCurrentObject (hdc=0x840107b1, type=0x1) returned 0xb00017 [0136.120] GetCurrentObject (hdc=0x840107b1, type=0x2) returned 0x900010 [0136.120] GetCurrentObject (hdc=0x840107b1, type=0x7) returned 0x1b0507a4 [0136.120] GetCurrentObject (hdc=0x840107b1, type=0x6) returned 0x8a01c2 [0136.121] SaveDC (hdc=0x840107b1) returned 1 [0136.121] GetNearestColor (hdc=0x840107b1, color=0xf0f0f0) returned 0xf0f0f0 [0136.121] CreateSolidBrush (color=0xf0f0f0) returned 0x2110065f [0136.121] FillRect (hDC=0x840107b1, lprc=0x4fe230, hbr=0x2110065f) returned 1 [0136.182] DeleteObject (ho=0x2110065f) returned 1 [0136.182] RestoreDC (hdc=0x840107b1, nSavedDC=-1) returned 1 [0136.184] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0136.184] PeekMessageW (in: lpMsg=0x4fef00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x4fef00) returned 1 [0136.184] IsWindowUnicode (hWnd=0x70030) returned 1 [0136.184] GetMessageW (in: lpMsg=0x4fef00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x4fef00) returned 1 [0136.184] TranslateMessage (lpMsg=0x4fef00) returned 0 [0136.184] DispatchMessageW (lpMsg=0x4fef00) returned 0x0 [0136.185] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0136.185] PeekMessageW (in: lpMsg=0x4fef00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x4fef00) returned 1 [0136.185] GetMessageA (in: lpMsg=0x4fef00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x4fef00) returned 0 [0136.192] DestroyCursor (hCursor=0xf0097) returned 1 [0136.193] GetWindowLongW (hWnd=0x6002e, nIndex=-20) returned 590208 [0136.193] DestroyWindow (hWnd=0x6002e) returned 1 [0136.193] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0136.194] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x46, wParam=0x0, lParam=0x4fecb4) returned 0x0 [0136.198] GetWindowPlacement (in: hWnd=0x6002e, lpwndpl=0x4fe9e0 | out: lpwndpl=0x4fe9e0) returned 1 [0136.199] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x47, wParam=0x0, lParam=0x4fecb4) returned 0x0 [0136.199] GetClientRect (in: hWnd=0x6002e, lpRect=0x4fe990 | out: lpRect=0x4fe990) returned 1 [0136.199] GetWindowRect (in: hWnd=0x6002e, lpRect=0x4fe990 | out: lpRect=0x4fe990) returned 1 [0136.199] PostThreadMessageW (idThread=0x1024, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0136.215] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0136.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x6002e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0136.217] DestroyWindow (hWnd=0x70030) returned 1 [0136.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0136.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0136.217] CallWindowProcW (lpPrevWndFunc=0x743c0140, hWnd=0x70030, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0136.235] GetCurrentThreadId () returned 0x1024 [0136.236] EnumThreadWindows (dwThreadId=0x1024, lpfn=0x49304b6, lParam=0x0) returned 1 [0136.236] IsWindowVisible (hWnd=0x401e2) returned 0 [0136.236] IsWindowVisible (hWnd=0x502b6) returned 0 [0136.242] GetCurrentThreadId () returned 0x1024 [0136.242] GetCurrentThreadId () returned 0x1024 [0136.243] EnumThreadWindows (dwThreadId=0x1024, lpfn=0x49304de, lParam=0x0) returned 1 [0136.243] IsWindowVisible (hWnd=0x401e2) returned 0 [0136.243] IsWindowVisible (hWnd=0x502b6) returned 0 [0136.245] OleUninitialize () [0136.245] CloseHandle (hObject=0x2f0) returned 1 [0136.245] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1f4c0002) returned 1 [0136.246] CoGetContextToken (in: pToken=0x4ff8a8 | out: pToken=0x4ff8a8) returned 0x0 [0136.246] CObjectContext::QueryInterface () returned 0x0 [0136.247] CObjectContext::GetCurrentThreadType () returned 0x0 [0136.247] Release () returned 0x0 [0136.248] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x73c0f0*=0x198, lpdwindex=0x4ff74c | out: lpdwindex=0x4ff74c) returned 0x0 Thread: id = 2 os_tid = 0x115c Thread: id = 3 os_tid = 0x114c Thread: id = 4 os_tid = 0x1144 [0070.089] CoGetContextToken (in: pToken=0x447f514 | out: pToken=0x447f514) returned 0x800401f0 [0070.089] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0070.089] RoInitialize () returned 0x1 [0070.089] RoUninitialize () returned 0x0 [0112.163] CloseHandle (hObject=0x2e0) returned 1 [0112.163] CloseHandle (hObject=0x2cc) returned 1 [0112.163] CloseHandle (hObject=0x2dc) returned 1 [0112.163] CloseHandle (hObject=0x2d8) returned 1 [0112.164] CloseHandle (hObject=0x2e8) returned 1 [0112.164] CloseHandle (hObject=0x2d4) returned 1 [0112.164] CloseHandle (hObject=0x2d0) returned 1 [0112.164] CloseHandle (hObject=0x2e4) returned 1 [0136.297] SetWindowLongW (hWnd=0x502b4, nIndex=-4, dwNewLong=1950089536) returned 76744166 [0136.298] SetClassLongW (hWnd=0x502b4, nIndex=-24, dwNewLong=1950089536) returned 0x49305be [0136.298] PostMessageW (hWnd=0x502b4, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0136.299] GetModuleHandleW (lpModuleName=0x0) returned 0xb0000 [0136.362] UnregisterClassW (lpClassName="WindowsForms10.Window.0.app.0.141b42a_r9_ad1", hInstance=0xb0000) returned 1 [0136.363] GetModuleHandleW (lpModuleName=0x0) returned 0xb0000 [0136.363] UnregisterClassW (lpClassName="WindowsForms10.Window.8.app.0.141b42a_r9_ad1", hInstance=0xb0000) returned 0 [0136.364] EtwEventUnregister (RegHandle=0x741760) returned 0x0 [0136.364] EtwEventUnregister (RegHandle=0x79edb0) returned 0x0 [0136.367] IsWindow (hWnd=0x401e2) returned 1 [0136.368] GetModuleHandleW (lpModuleName="user32.dll") returned 0x750c0000 [0136.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x447f2b4, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcWâq", lpUsedDefaultChar=0x0) returned 14 [0136.368] GetProcAddress (hModule=0x750c0000, lpProcName="DefWindowProcW") returned 0x743c0140 [0136.369] SetWindowLongW (hWnd=0x401e2, nIndex=-4, dwNewLong=1950089536) returned 76744326 [0136.369] SetClassLongW (hWnd=0x401e2, nIndex=-24, dwNewLong=1950089536) returned 0x4930686 [0136.369] IsWindow (hWnd=0x401e2) returned 1 [0136.370] DestroyWindow (hWnd=0x401e2) returned 0 [0136.370] PostMessageW (hWnd=0x401e2, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0136.370] SetConsoleCtrlHandler (HandlerRoutine=0x493065e, Add=0) returned 1 [0136.393] GdipDeleteFont (font=0x4abef48) returned 0x0 [0136.395] DeleteObject (ho=0x380a0667) returned 1 [0136.395] DestroyCursor (hCursor=0x170123) returned 1 [0136.396] CertFreeCertificateContext (pCertContext=0x76acd48) returned 1 [0136.396] CertFreeCertificateContext (pCertContext=0x76ad7e8) returned 1 [0136.398] CertFreeCertificateContext (pCertContext=0x76ad978) returned 1 [0136.399] CertFreeCertificateContext (pCertContext=0x76ad8d8) returned 1 [0136.399] CertFreeCertificateContext (pCertContext=0x76ad6f8) returned 1 [0136.400] CertCloseStore (hCertStore=0x76a5490, dwFlags=0x0) returned 1 [0136.401] CertFreeCertificateContext (pCertContext=0x76ad6f8) returned 1 [0136.401] CertFreeCertificateContext (pCertContext=0x76adb58) returned 1 [0136.402] DeleteSecurityContext (phContext=0x2487a8c) returned 0x0 [0136.403] CloseHandle (hObject=0x5c8) returned 1 [0136.405] setsockopt (s=0x5b8, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0136.405] closesocket (s=0x5b8) returned 0 [0136.406] CloseHandle (hObject=0x5bc) returned 1 [0136.406] setsockopt (s=0x5a8, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0136.406] closesocket (s=0x5a8) returned 0 [0136.407] CloseHandle (hObject=0x5b4) returned 1 [0136.407] setsockopt (s=0x5a0, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0136.408] closesocket (s=0x5a0) returned 0 [0136.410] CertCloseStore (hCertStore=0x76b3020, dwFlags=0x0) returned 1 [0136.411] CloseHandle (hObject=0x558) returned 1 [0136.411] CloseHandle (hObject=0x554) returned 1 [0136.411] CloseHandle (hObject=0x518) returned 1 [0136.411] CloseHandle (hObject=0x514) returned 1 [0136.412] CertFreeCertificateContext (pCertContext=0x76ad7e8) returned 1 [0136.412] CertFreeCertificateContext (pCertContext=0x76ad928) returned 1 [0136.412] WinHttpCloseHandle (hInternet=0x7faf88) returned 1 [0136.413] CloseHandle (hObject=0x4cc) returned 1 [0136.414] CloseHandle (hObject=0x4c8) returned 1 [0136.414] RegCloseKey (hKey=0x4c4) returned 0x0 [0136.414] CloseHandle (hObject=0x4c0) returned 1 [0136.414] RegCloseKey (hKey=0x4bc) returned 0x0 [0136.415] CloseHandle (hObject=0x4b8) returned 1 [0136.415] RegCloseKey (hKey=0x4b4) returned 0x0 [0136.415] RegCloseKey (hKey=0x4b0) returned 0x0 [0136.415] CloseHandle (hObject=0x498) returned 1 [0136.416] setsockopt (s=0x48c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0136.416] closesocket (s=0x48c) returned 0 [0136.417] CloseHandle (hObject=0x490) returned 1 [0136.417] setsockopt (s=0x484, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0136.417] closesocket (s=0x484) returned 0 [0136.417] CloseHandle (hObject=0x488) returned 1 [0136.418] CloseHandle (hObject=0x41c) returned 1 [0136.418] CloseHandle (hObject=0x418) returned 1 [0136.418] CloseHandle (hObject=0x414) returned 1 [0136.419] CloseHandle (hObject=0x2e0) returned 1 [0136.419] CloseHandle (hObject=0x2cc) returned 1 [0136.419] CloseHandle (hObject=0x2dc) returned 1 [0136.419] CloseHandle (hObject=0x2d8) returned 1 [0136.420] CertFreeCertificateContext (pCertContext=0x76ad9c8) returned 1 [0136.420] CertFreeCertificateContext (pCertContext=0x76ada68) returned 1 [0136.421] CloseHandle (hObject=0x2d0) returned 1 [0136.421] CloseHandle (hObject=0x2e4) returned 1 [0136.421] CloseHandle (hObject=0x404) returned 1 [0136.422] UnmapViewOfFile (lpBaseAddress=0x4910000) returned 1 [0136.429] FreeCredentialsHandle (phCredential=0x2487888) returned 0x0 [0136.430] DeleteSecurityContext (phContext=0x24c4ea8) returned 0x0 [0136.431] setsockopt (s=0x6a4, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0136.431] closesocket (s=0x6a4) returned 0 [0136.433] CertFreeCertificateContext (pCertContext=0x76ad068) returned 1 [0136.433] RegCloseKey (hKey=0x80000004) returned 0x0 [0136.436] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 5 os_tid = 0x1040 Thread: id = 6 os_tid = 0x300 Thread: id = 7 os_tid = 0x1100 Thread: id = 8 os_tid = 0x1044 Thread: id = 9 os_tid = 0x1244 Thread: id = 10 os_tid = 0xe6c [0126.856] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0126.856] RoInitialize () returned 0x1 [0126.856] RoUninitialize () returned 0x0 [0126.858] ResetEvent (hEvent=0x2d4) returned 1 Thread: id = 11 os_tid = 0x6d0 Thread: id = 12 os_tid = 0xeb4 Thread: id = 13 os_tid = 0xa50 [0136.438] SleepEx (dwMilliseconds=0x14, bAlertable=0)