# Time of Day Thread Module API Return Value Error Duration 1 4:55:07.896 AM 1 SHELL32.dll IsOS ( 33 ) FALSE 0.0000067 2 4:55:09.017 AM 1 SHELL32.dll PathRemoveBlanksW ( "https://google.com" ) 0.0000061 3 4:55:09.017 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdc48, "https://google.com", 2084 ) 0x01dbdc48 0.0000047 4 4:55:09.017 AM 1 SHELL32.dll PathRemoveArgsW ( "https://google.com" ) 0.0000056 5 4:55:09.017 AM 1 SHELL32.dll PathUnquoteSpacesW ( "https://google.com" ) 0.0000047 6 4:55:09.017 AM 1 SHELL32.dll PathGetDriveNumberW ( "https://google.com" ) -1 0.0000045 7 4:55:09.027 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000053 8 4:55:09.027 AM 1 SHELL32.dll IsOS ( 33 ) FALSE 0.0000075 9 4:55:09.027 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f884 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000053 10 4:55:09.027 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f868 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 11 4:55:09.027 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f868 ) S_OK 0.0000045 12 4:55:09.027 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x0001005e, 0x001f0248 ) S_FALSE 0.0000047 13 4:55:09.027 AM 1 SHELL32.dll UrlIsW ( "https://google.com", URLIS_URL ) TRUE 0.0000067 14 4:55:09.027 AM 1 SHELL32.dll PathUnquoteSpacesW ( "https://google.com" ) 0.0000047 15 4:55:09.027 AM 1 SHELL32.dll UrlIsW ( "https://google.com", URLIS_URL ) TRUE 0.0000047 16 4:55:09.027 AM 1 SHELL32.dll SHRegGetBoolUSValueW ( "Software\Microsoft\Windows\CurrentVersion\Explorer", "MaximizeApps", FALSE, FALSE ) FALSE 0.0000930 17 4:55:09.027 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer", 0, KEY_QUERY_VALUE, 0x02765bf8 ) ERROR_SUCCESS 0.0000196 18 4:55:09.027 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "MaximizeApps", NULL, 0x01dbe4fc, 0x01dbe500, 0x01dbe4f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 19 4:55:09.027 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer", 0, KEY_QUERY_VALUE, 0x02765c00 ) ERROR_SUCCESS 0.0000131 20 4:55:09.027 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000768, "MaximizeApps", NULL, 0x01dbe4fc, 0x01dbe500, 0x01dbe4f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 21 4:55:09.027 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000059 22 4:55:09.027 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 23 4:55:09.027 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f86c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000047 24 4:55:09.027 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f850 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 25 4:55:09.027 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f850 ) S_OK 0.0000045 26 4:55:09.027 AM 1 SHELL32.dll IsOS ( 28 ) FALSE 0.0000056 27 4:55:09.027 AM 1 SHELL32.dll StrCpyNW ( 0x0275ad7c, "C:\Documents and Settings\Administrator", 260 ) 0x0275ad7c 0.0000045 28 4:55:09.027 AM 1 SHELL32.dll PathIsDirectoryW ( "C:\Documents and Settings\Administrator" ) TRUE 0.0000218 29 4:55:09.027 AM 1 SHELL32.dll StrCmpICW ( "C:\Documents and Settings\Administrator", ".\" ) 53 0.0000045 30 4:55:09.027 AM 1 SHELL32.dll UrlIsW ( "https://google.com", URLIS_URL ) TRUE 0.0000047 31 4:55:09.027 AM 1 SHELL32.dll StrCpyNW ( 0x02759d34, "https://google.com", 2084 ) 0x02759d34 0.0000042 32 4:55:09.027 AM 1 SHELL32.dll PathUnquoteSpacesW ( "https://google.com" ) 0.0000045 33 4:55:09.027 AM 1 SHELL32.dll StrDupW ( "https://google.com" ) 0x0015e290 0.0000050 34 4:55:09.027 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe7ac ) S_OK 0.0000047 35 4:55:09.027 AM 1 SHELL32.dll PathIsUNCW ( "https://google.com" ) FALSE 0.0000045 36 4:55:09.027 AM 1 SHELL32.dll UrlIsW ( "https://google.com", URLIS_URL ) TRUE 0.0000047 37 4:55:09.027 AM 1 SHELL32.dll ParseURLW ( "https://google.com", 0x01dbe690 ) S_OK 0.0000053 38 4:55:09.027 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace", 0, KEY_READ, 0x01dbe66c ) ERROR_SUCCESS 0.0000162 39 4:55:09.027 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000194, "{11016101-E366-4D22-BC06-4ADA335C892B}", 0, KEY_READ, 0x01dbe664 ) ERROR_SUCCESS 0.0000193 40 4:55:09.027 AM 1 SHELL32.dll SHGetValueW ( 0x00000768, NULL, "SuppressionPolicy", NULL, 0x01dbe64c, 0x01dbe640 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 41 4:55:09.027 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000768, "SuppressionPolicy", NULL, 0x01dbe4f4, 0x01dbe64c, 0x01dbe640 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 42 4:55:09.027 AM 1 SHELL32.dll GUIDFromStringW ( "{11016101-E366-4D22-BC06-4ADA335C892B}", {00140008-23ff-77e6-0000-000038cf1802} ) TRUE 0.0000059 43 4:55:09.027 AM 1 SHELL32.dll RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000061 44 4:55:09.027 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000194, "{1f4de370-d627-11d1-ba4f-00a0c91eedba}", 0, KEY_READ, 0x01dbe664 ) ERROR_SUCCESS 0.0000156 45 4:55:09.027 AM 1 SHELL32.dll SHGetValueW ( 0x00000768, NULL, "SuppressionPolicy", NULL, 0x01dbe64c, 0x01dbe640 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 46 4:55:09.027 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000768, "SuppressionPolicy", NULL, 0x01dbe4f4, 0x01dbe64c, 0x01dbe640 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 47 4:55:09.027 AM 1 SHELL32.dll GUIDFromStringW ( "{1f4de370-d627-11d1-ba4f-00a0c91eedba}", IE History and Feeds Shell Data Source for Windows Search ) TRUE 0.0000056 48 4:55:09.027 AM 1 SHELL32.dll RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000059 49 4:55:09.027 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000194, "{450D8FBA-AD25-11D0-98A8-0800361B1103}", 0, KEY_READ, 0x01dbe664 ) ERROR_SUCCESS 0.0000142 50 4:55:09.027 AM 1 SHELL32.dll SHGetValueW ( 0x00000768, NULL, "SuppressionPolicy", NULL, 0x01dbe64c, 0x01dbe640 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000187 51 4:55:09.027 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000768, "SuppressionPolicy", NULL, 0x01dbe4f4, 0x01dbe64c, 0x01dbe640 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 52 4:55:09.027 AM 1 SHELL32.dll GUIDFromStringW ( "{450D8FBA-AD25-11D0-98A8-0800361B1103}", Computer Search Results Folder ) TRUE 0.0000056 53 4:55:09.027 AM 1 SHELL32.dll RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000059 54 4:55:09.027 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000194, "{645FF040-5081-101B-9F08-00AA002F954E}", 0, KEY_READ, 0x01dbe664 ) ERROR_SUCCESS 0.0000151 55 4:55:09.027 AM 1 SHELL32.dll SHGetValueW ( 0x00000768, NULL, "SuppressionPolicy", NULL, 0x01dbe64c, 0x01dbe640 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 56 4:55:09.027 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000768, "SuppressionPolicy", NULL, 0x01dbe4f4, 0x01dbe64c, 0x01dbe640 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 57 4:55:09.027 AM 1 SHELL32.dll GUIDFromStringW ( "{645FF040-5081-101B-9F08-00AA002F954E}", {450d8fba-ad25-11d0-98a8-0800361b1103} ) TRUE 0.0000053 58 4:55:09.027 AM 1 SHELL32.dll RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000056 59 4:55:09.027 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000194, "{e17d4fc0-5564-11d1-83f2-00a0c90dc849}", 0, KEY_READ, 0x01dbe664 ) ERROR_SUCCESS 0.0000148 60 4:55:09.027 AM 1 SHELL32.dll SHGetValueW ( 0x00000768, NULL, "SuppressionPolicy", NULL, 0x01dbe64c, 0x01dbe640 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 61 4:55:09.027 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000768, "SuppressionPolicy", NULL, 0x01dbe4f4, 0x01dbe64c, 0x01dbe640 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 62 4:55:09.027 AM 1 SHELL32.dll GUIDFromStringW ( "{e17d4fc0-5564-11d1-83f2-00a0c90dc849}", Recycle Bin ) TRUE 0.0007403 63 4:55:09.037 AM 1 SHELL32.dll RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000061 64 4:55:09.037 AM 1 SHELL32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000050 65 4:55:09.037 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace", 0, KEY_READ, 0x01dbe66c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 66 4:55:09.037 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000000c8, NULL, 0, MAXIMUM_ALLOWED, 0x01dbe67c ) ERROR_SUCCESS 0.0000120 67 4:55:09.037 AM 1 SHELL32.dll RegCreateKeyExW ( 0x00000194, "SessionInfo\0000000000012002", 0, NULL, REG_OPTION_VOLATILE, KEY_QUERY_VALUE, NULL, 0x01dbe724, 0x01dbe718 ) ERROR_SUCCESS 0.0000145 68 4:55:09.037 AM 1 SHELL32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 69 4:55:09.037 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000768, "Desktop\NameSpace", 0, KEY_READ, 0x01dbe670 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 70 4:55:09.037 AM 1 SHELL32.dll RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000056 71 4:55:09.037 AM 1 SHELL32.dll SHSkipJunction ( 0x00167960, My Computer ) FALSE 0.0000053 72 4:55:09.037 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe718 ) ERROR_SUCCESS 0.0000405 73 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000076a, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000458 74 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000076a, "WantsParseDisplayName", NULL, 0x01dbe5d0, NULL, 0x01dbe5b0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000338 75 4:55:09.037 AM 1 SHELL32.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000095 76 4:55:09.037 AM 1 SHELL32.dll SHSkipJunction ( 0x00167960, My Network Places ) FALSE 0.0001260 77 4:55:09.037 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe718 ) ERROR_SUCCESS 0.0000489 78 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000076a, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000453 79 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000076a, "WantsParseDisplayName", NULL, 0x01dbe5d0, NULL, 0x01dbe5b0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000332 80 4:55:09.037 AM 1 SHELL32.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000084 81 4:55:09.037 AM 1 SHELL32.dll SHSkipJunction ( 0x00167960, {871c5380-42a0-1069-a2ea-08002b30309d} ) FALSE 0.0000061 82 4:55:09.037 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe718 ) ERROR_SUCCESS 0.0000305 83 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000076a, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000408 84 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000076a, "WantsParseDisplayName", NULL, 0x01dbe5d0, NULL, 0x01dbe5b0 ) ERROR_SUCCESS 0.0000291 85 4:55:09.037 AM 1 SHELL32.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000075 86 4:55:09.037 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_QUERY_VALUE, 0x01dbe50c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000265 87 4:55:09.037 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe52c, "{871C5380-42A0-1069-A2EA-08002B30309D}", 103 ) 0x01dbe52c 0.0000056 88 4:55:09.037 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe078, "CLSID\", 167 ) 0x01dbe078 0.0000053 89 4:55:09.037 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\", "{871C5380-42A0-1069-A2EA-08002B30309D}", 167 ) 0x01dbe078 0.0000056 90 4:55:09.037 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", "\InProcServer32", 167 ) 0x01dbe078 0.0000056 91 4:55:09.037 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\InProcServer32", 0, KEY_QUERY_VALUE, 0x01dbe074 ) ERROR_SUCCESS 0.0000279 92 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000076a, NULL, NULL, NULL, 0x01dbe324, 0x01dbe06c ) ERROR_SUCCESS 0.0000497 93 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000076a, NULL, NULL, 0x01dbdf14, 0x01dbe324, 0x01dbe06c ) ERROR_SUCCESS 0.0000383 94 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000076a, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000355 95 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000076a, "LoadWithoutCOM", NULL, 0x01dbdf14, NULL, 0x01dbdef4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000249 96 4:55:09.037 AM 1 SHELL32.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000075 97 4:55:09.037 AM 1 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\ieframe.dll" ) 0x01dbe34c 0.0000059 98 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000340, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 99 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000340, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, 0x01dbe0b0, NULL, 0x01dbe090 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 100 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000328, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000187 101 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000328, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, 0x01dbe0b0, NULL, 0x01dbe090 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 102 4:55:09.037 AM 1 SHELL32.dll RegQueryValueExW ( 0x00000334, "{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x01dbde6c, 0x01dbde60, 0x01dbde74 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000120 103 4:55:09.037 AM 1 SHELL32.dll RegQueryValueExW ( 0x00000330, "{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x01dbde6c, 0x01dbde50, 0x01dbde74 ) ERROR_SUCCESS 0.0000115 104 4:55:09.037 AM 1 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x01dbdac4 ) ERROR_SUCCESS 0.0000154 105 4:55:09.037 AM 1 CLBCatQ.DLL RegQueryValueExW ( 0x00000768, "REGDBVersion", NULL, NULL, 0x01dbdb40, 0x01dbdac0 ) ERROR_SUCCESS 0.0000095 106 4:55:09.037 AM 1 CLBCatQ.DLL RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000073 107 4:55:09.037 AM 1 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x01dbdb6c ) ERROR_SUCCESS 0.0000134 108 4:55:09.037 AM 1 CLBCatQ.DLL RegQueryValueExW ( 0x00000768, "REGDBVersion", NULL, NULL, 0x01dbdbe8, 0x01dbdb68 ) ERROR_SUCCESS 0.0000078 109 4:55:09.037 AM 1 CLBCatQ.DLL RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000073 110 4:55:09.037 AM 1 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_READ, 0x01dbdd68 ) ERROR_SUCCESS 0.0000243 111 4:55:09.037 AM 1 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218aa58 ) ERROR_SUCCESS 0.0000162 112 4:55:09.037 AM 1 ole32.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000078 113 4:55:09.037 AM 1 ole32.dll RegOpenKeyExW ( 0x00000196, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_READ, 0x01dbde34 ) ERROR_SUCCESS 0.0000221 114 4:55:09.037 AM 1 ole32.dll RegOpenKeyExW ( 0x0000076a, "InprocServer32", 0, KEY_READ, 0x01dbddd0 ) ERROR_SUCCESS 0.0000293 115 4:55:09.037 AM 1 ole32.dll RegQueryValueExW ( 0x00000386, "InprocServer32", NULL, 0x01dbdddc, 0x02194ca0, 0x01dbddc4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000249 116 4:55:09.037 AM 1 ole32.dll RegCloseKey ( 0x00000386 ) ERROR_SUCCESS 0.0000073 117 4:55:09.037 AM 1 ole32.dll RegOpenKeyExW ( 0x0000076a, "LocalServer32", 0, KEY_READ, 0x01dbddf0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000285 118 4:55:09.037 AM 1 ole32.dll RegOpenKeyExW ( 0x0000076a, "InprocServer32", 0, KEY_READ, 0x01dbddf0 ) ERROR_SUCCESS 0.0000285 119 4:55:09.037 AM 1 ole32.dll RegQueryValueExW ( 0x00000386, NULL, NULL, 0x01dbddfc, 0x02194ca0, 0x01dbdde4 ) ERROR_SUCCESS 0.0000246 120 4:55:09.037 AM 1 ole32.dll RegCloseKey ( 0x00000386 ) ERROR_SUCCESS 0.0000075 121 4:55:09.037 AM 1 ole32.dll RegOpenKeyExW ( 0x0000076a, "InprocHandler32", 0, KEY_READ, 0x01dbddf0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000268 122 4:55:09.037 AM 1 ole32.dll RegOpenKeyExW ( 0x0000076a, "LocalServer32", 0, KEY_READ, 0x01dbddf0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000254 123 4:55:09.037 AM 1 ole32.dll RegOpenKeyExW ( 0x0000076a, "LocalServer", 0, KEY_READ, 0x01dbddf0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000260 124 4:55:09.037 AM 1 ole32.dll RegOpenKeyExW ( 0x00000196, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_READ, 0x01dbdd94 ) ERROR_SUCCESS 0.0000229 125 4:55:09.037 AM 1 ole32.dll RegQueryValueExW ( 0x00000386, "AppID", NULL, 0x01dbdd68, 0x01dbdd98, 0x01dbdd58 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000240 126 4:55:09.037 AM 1 ole32.dll RegCloseKey ( 0x00000386 ) ERROR_SUCCESS 0.0000075 127 4:55:09.037 AM 1 ole32.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000073 128 4:55:09.037 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_QUERY_VALUE, 0x01dbe0c8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 129 4:55:09.037 AM 1 urlmon.dll StrCmpNICW ( "https://google.com", "https", 5 ) 0 0.0000067 130 4:55:09.037 AM 1 urlmon.dll StrCmpNW ( "://google.com", "://", 3 ) 0 0.0000053 131 4:55:09.037 AM 1 SHELL32.dll UrlIsW ( "https://google.com", URLIS_URL ) TRUE 0.0000050 132 4:55:09.037 AM 1 SHELL32.dll PathIsUNCW ( "https://google.com" ) FALSE 0.0000042 133 4:55:09.037 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks", 0, KEY_READ, 0x01dbe760 ) ERROR_SUCCESS 0.0000229 134 4:55:09.037 AM 1 SHELL32.dll RegEnumValueW ( 0x00000768, 0, 0x01dbe774, 0x01dbe75c, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000087 135 4:55:09.037 AM 1 SHELL32.dll GUIDFromStringW ( "{AEB6717E-7E19-11d0-97EE-00C04FD91972}", IID_NULL ) TRUE 0.0000064 136 4:55:09.037 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe574, "{AEB6717E-7E19-11D0-97EE-00C04FD91972}", 103 ) 0x01dbe574 0.0000042 137 4:55:09.037 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe0c0, "CLSID\", 167 ) 0x01dbe0c0 0.0000039 138 4:55:09.037 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\", "{AEB6717E-7E19-11D0-97EE-00C04FD91972}", 167 ) 0x01dbe0c0 0.0000045 139 4:55:09.037 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\{AEB6717E-7E19-11D0-97EE-00C04FD91972}", "\InProcServer32", 167 ) 0x01dbe0c0 0.0000045 140 4:55:09.037 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{AEB6717E-7E19-11D0-97EE-00C04FD91972}\InProcServer32", 0, KEY_QUERY_VALUE, 0x01dbe0bc ) ERROR_SUCCESS 0.0000263 141 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000386, NULL, NULL, NULL, 0x01dbe36c, 0x01dbe0b4 ) ERROR_SUCCESS 0.0000296 142 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000386, NULL, NULL, 0x01dbdf5c, 0x01dbe36c, 0x01dbe0b4 ) ERROR_SUCCESS 0.0000207 143 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000386, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000279 144 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000386, "LoadWithoutCOM", NULL, 0x01dbdf5c, NULL, 0x01dbdf3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 145 4:55:09.037 AM 1 SHELL32.dll RegCloseKey ( 0x00000386 ) ERROR_SUCCESS 0.0000061 146 4:55:09.037 AM 1 SHELL32.dll PathFindFileNameW ( "shell32.dll" ) 0x01dbe36c 0.0000045 147 4:55:09.037 AM 1 SHELL32.dll RegEnumValueW ( 0x00000768, 1, 0x01dbe774, 0x01dbe75c, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000056 148 4:55:09.037 AM 1 SHELL32.dll RegCloseKey ( 0x00000768 ) ERROR_SUCCESS 0.0000056 149 4:55:09.037 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe728 ) S_OK 0.0000042 150 4:55:09.037 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_QUERY_VALUE, 0x01dbe4f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 151 4:55:09.037 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe518, "{871C5380-42A0-1069-A2EA-08002B30309D}", 103 ) 0x01dbe518 0.0000045 152 4:55:09.037 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe064, "CLSID\", 167 ) 0x01dbe064 0.0000042 153 4:55:09.037 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\", "{871C5380-42A0-1069-A2EA-08002B30309D}", 167 ) 0x01dbe064 0.0000045 154 4:55:09.037 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", "\InProcServer32", 167 ) 0x01dbe064 0.0000045 155 4:55:09.037 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\InProcServer32", 0, KEY_QUERY_VALUE, 0x01dbe060 ) ERROR_SUCCESS 0.0000257 156 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000076a, NULL, NULL, NULL, 0x01dbe310, 0x01dbe058 ) ERROR_SUCCESS 0.0000282 157 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000076a, NULL, NULL, 0x01dbdf00, 0x01dbe310, 0x01dbe058 ) ERROR_SUCCESS 0.0000196 158 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x0000076a, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000268 159 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000076a, "LoadWithoutCOM", NULL, 0x01dbdf00, NULL, 0x01dbdee0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 160 4:55:09.037 AM 1 SHELL32.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000059 161 4:55:09.037 AM 1 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\ieframe.dll" ) 0x01dbe338 0.0000045 162 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000340, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 163 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000340, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, 0x01dbe09c, NULL, 0x01dbe07c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 164 4:55:09.037 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000328, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 165 4:55:09.037 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000328, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, 0x01dbe09c, NULL, 0x01dbe07c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 166 4:55:09.037 AM 1 SHELL32.dll RegQueryValueExW ( 0x00000334, "{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x01dbde58, 0x01dbde4c, 0x01dbde60 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 167 4:55:09.037 AM 1 SHELL32.dll RegQueryValueExW ( 0x00000330, "{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x01dbde58, 0x01dbde3c, 0x01dbde60 ) ERROR_SUCCESS 0.0000162 168 4:55:09.047 AM 1 ole32.dll RegNotifyChangeKeyValue ( 0x000000e8, TRUE, REG_NOTIFY_CHANGE_LAST_SET | REG_NOTIFY_CHANGE_NAME, 0x000000ec, TRUE ) ERROR_SUCCESS 0.0000137 169 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000078 170 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000073 171 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000075 172 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000626 ) ERROR_SUCCESS 0.0000070 173 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000772 ) ERROR_SUCCESS 0.0000070 174 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x0000048e ) ERROR_SUCCESS 0.0000070 175 4:55:09.047 AM 1 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x01dbdab0 ) ERROR_SUCCESS 0.0000154 176 4:55:09.047 AM 1 CLBCatQ.DLL RegQueryValueExW ( 0x0000048c, "REGDBVersion", NULL, NULL, 0x01dbdb2c, 0x01dbdaac ) ERROR_SUCCESS 0.0000089 177 4:55:09.047 AM 1 CLBCatQ.DLL RegCloseKey ( 0x0000048c ) ERROR_SUCCESS 0.0000067 178 4:55:09.047 AM 1 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x01dbdb58 ) ERROR_SUCCESS 0.0000201 179 4:55:09.047 AM 1 CLBCatQ.DLL RegQueryValueExW ( 0x0000048c, "REGDBVersion", NULL, NULL, 0x01dbdbd4, 0x01dbdb54 ) ERROR_SUCCESS 0.0000075 180 4:55:09.047 AM 1 CLBCatQ.DLL RegCloseKey ( 0x0000048c ) ERROR_SUCCESS 0.0000070 181 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_READ, 0x01dbdd54 ) ERROR_SUCCESS 0.0000251 182 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218ad10 ) ERROR_SUCCESS 0.0000148 183 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x0000048e ) ERROR_SUCCESS 0.0000073 184 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x00000772, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_READ, 0x01dbde20 ) ERROR_SUCCESS 0.0000212 185 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "InprocServer32", 0, KEY_READ, 0x01dbddbc ) ERROR_SUCCESS 0.0000274 186 4:55:09.047 AM 1 ole32.dll RegQueryValueExW ( 0x00000626, "InprocServer32", NULL, 0x01dbddc8, 0x02194ca0, 0x01dbddb0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000237 187 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000626 ) ERROR_SUCCESS 0.0000070 188 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "LocalServer32", 0, KEY_READ, 0x01dbdddc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000254 189 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "InprocServer32", 0, KEY_READ, 0x01dbdddc ) ERROR_SUCCESS 0.0000257 190 4:55:09.047 AM 1 ole32.dll RegQueryValueExW ( 0x00000626, NULL, NULL, 0x01dbdde8, 0x02194ca0, 0x01dbddd0 ) ERROR_SUCCESS 0.0000226 191 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000626 ) ERROR_SUCCESS 0.0000070 192 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "InprocHandler32", 0, KEY_READ, 0x01dbdddc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000254 193 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "LocalServer32", 0, KEY_READ, 0x01dbdddc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000279 194 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "LocalServer", 0, KEY_READ, 0x01dbdddc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000243 195 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x00000772, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_READ, 0x01dbdd80 ) ERROR_SUCCESS 0.0000212 196 4:55:09.047 AM 1 ole32.dll RegQueryValueExW ( 0x00000626, "AppID", NULL, 0x01dbdd54, 0x01dbdd84, 0x01dbdd44 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000226 197 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000626 ) ERROR_SUCCESS 0.0000073 198 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x0000048e ) ERROR_SUCCESS 0.0000067 199 4:55:09.047 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_QUERY_VALUE, 0x01dbe0b4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 200 4:55:09.047 AM 1 urlmon.dll QISearch ( 0x0218bb98, 0x6f38eb20, IPropertyStore, 0x01dbc4b0 ) S_OK 0.0000056 201 4:55:09.047 AM 1 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x01dbbd30 ) ERROR_SUCCESS 0.0000137 202 4:55:09.047 AM 1 CLBCatQ.DLL RegQueryValueExW ( 0x0000048c, "REGDBVersion", NULL, NULL, 0x01dbbdac, 0x01dbbd2c ) ERROR_SUCCESS 0.0000078 203 4:55:09.047 AM 1 CLBCatQ.DLL RegCloseKey ( 0x0000048c ) ERROR_SUCCESS 0.0000070 204 4:55:09.047 AM 1 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x01dbbdd8 ) ERROR_SUCCESS 0.0000123 205 4:55:09.047 AM 1 CLBCatQ.DLL RegQueryValueExW ( 0x0000048c, "REGDBVersion", NULL, NULL, 0x01dbbe54, 0x01dbbdd4 ) ERROR_SUCCESS 0.0000073 206 4:55:09.047 AM 1 CLBCatQ.DLL RegCloseKey ( 0x0000048c ) ERROR_SUCCESS 0.0000067 207 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{6F237DF9-9DDB-47AD-B218-400D54C286AD}", 0, KEY_READ, 0x01dbbfd4 ) ERROR_SUCCESS 0.0000240 208 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218ac28 ) ERROR_SUCCESS 0.0000142 209 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x0000048e ) ERROR_SUCCESS 0.0000073 210 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x00000626, "CLSID\{6F237DF9-9DDB-47AD-B218-400D54C286AD}", 0, KEY_READ, 0x01dbc0a0 ) ERROR_SUCCESS 0.0000212 211 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "InprocServer32", 0, KEY_READ, 0x01dbc03c ) ERROR_SUCCESS 0.0000324 212 4:55:09.047 AM 1 ole32.dll RegQueryValueExW ( 0x00000322, "InprocServer32", NULL, 0x01dbc048, 0x02194ca0, 0x01dbc030 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000251 213 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000073 214 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "LocalServer32", 0, KEY_READ, 0x01dbc05c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000249 215 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "InprocServer32", 0, KEY_READ, 0x01dbc05c ) ERROR_SUCCESS 0.0000265 216 4:55:09.047 AM 1 ole32.dll RegQueryValueExW ( 0x00000322, NULL, NULL, 0x01dbc068, 0x02194ca0, 0x01dbc050 ) ERROR_SUCCESS 0.0000243 217 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000070 218 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "InprocHandler32", 0, KEY_READ, 0x01dbc05c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000249 219 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "LocalServer32", 0, KEY_READ, 0x01dbc05c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000243 220 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "LocalServer", 0, KEY_READ, 0x01dbc05c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000243 221 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x00000626, "CLSID\{6F237DF9-9DDB-47AD-B218-400D54C286AD}", 0, KEY_READ, 0x01dbc000 ) ERROR_SUCCESS 0.0000243 222 4:55:09.047 AM 1 ole32.dll RegQueryValueExW ( 0x00000322, "AppID", NULL, 0x01dbbfd4, 0x01dbc004, 0x01dbbfc4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000229 223 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000073 224 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x0000048e ) ERROR_SUCCESS 0.0000070 225 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x00000626, "CLSID\{6F237DF9-9DDB-47AD-B218-400D54C286AD}", 0, KEY_READ, 0x01dbb59c ) ERROR_SUCCESS 0.0000237 226 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x0000048e, "InprocServer32", 0, KEY_READ, 0x01dbb55c ) ERROR_SUCCESS 0.0000268 227 4:55:09.047 AM 1 ole32.dll RegQueryValueExW ( 0x00000322, "ThreadingModel", NULL, 0x01dbb568, 0x01dbb5a0, 0x01dbb558 ) ERROR_SUCCESS 0.0000240 228 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000073 229 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x0000048e ) ERROR_SUCCESS 0.0000070 230 4:55:09.047 AM 1 ole32.dll RegOpenUserClassesRoot ( 0x0000048c, 0, MAXIMUM_ALLOWED, 0x01dbb174 ) ERROR_SUCCESS 0.0000179 231 4:55:09.047 AM 1 ole32.dll RegOpenKeyExW ( 0x00000322, "CLSID\{6F237DF9-9DDB-47AD-B218-400D54C286AD}", 0, KEY_READ, 0x01dbb3c0 ) ERROR_SUCCESS 0.0000207 232 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000070 233 4:55:09.047 AM 1 ole32.dll RegCloseKey ( 0x0000048e ) ERROR_SUCCESS 0.0000070 234 4:55:09.047 AM 1 urlmon.dll QISearch ( 0x0215eee0, 0x6f38e2b8, IUnknown, 0x01dbb6ac ) S_OK 0.0000056 235 4:55:09.047 AM 1 urlmon.dll QISearch ( 0x0215eee0, 0x6f38e2b8, {465a756d-45ad-4305-85fd-d3321650f3b7}, 0x01dbb6d4 ) S_OK 0.0000056 236 4:55:09.047 AM 1 urlmon.dll QISearch ( 0x0215eee0, 0x6f38e2b8, {465a756d-45ad-4305-85fd-d3321650f3b7}, 0x01dbc364 ) S_OK 0.0000053 237 4:55:09.047 AM 1 urlmon.dll QISearch ( 0x0218bb98, 0x6f38eb20, IPropertyStore, 0x0215ef10 ) S_OK 0.0000053 238 4:55:09.047 AM 1 urlmon.dll QISearch ( 0x0215eee0, 0x6f38e2b8, IUnknown, 0x01dbc4f4 ) S_OK 0.0000053 239 4:55:09.047 AM 1 urlmon.dll QISearch ( 0x0215eee0, 0x6f38e2b8, IPropertyStore, 0x00167984 ) S_OK 0.0000050 240 4:55:09.047 AM 1 SHELL32.dll SHUnicodeToAnsi ( "C:\Documents and Settings\Administrator", 0x0015e320, 40 ) 40 0.0000061 241 4:55:09.047 AM 1 SHELL32.dll QISearch ( 0x00170cd0, 0x7c92b550, IQueryAssociations, 0x01dbe60c ) S_OK 0.0000053 242 4:55:09.047 AM 1 SHELL32.dll StrChrW ( "https", '\' ) NULL 0.0000053 243 4:55:09.047 AM 1 SHELL32.dll SHStrDupW ( "https", 0x00170ce4 ) S_OK 0.0000061 244 4:55:09.047 AM 1 SHELL32.dll AssocCreate ( {9016d0dd-7c41-46cc-a664-bf22f7cb186a}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x01dbe550 ) S_OK 0.0000067 245 4:55:09.047 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "https", 0, MAXIMUM_ALLOWED, 0x01dbe480 ) ERROR_SUCCESS 0.0000293 246 4:55:09.047 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000001ea, "CurVer", 0, KEY_QUERY_VALUE, 0x01dbe430 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000293 247 4:55:09.047 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000001ea, NULL, 0, MAXIMUM_ALLOWED, 0x0015e88c ) ERROR_SUCCESS 0.0000251 248 4:55:09.047 AM 1 SHLWAPI.dll RegCloseKey ( 0x000001ea ) ERROR_SUCCESS 0.0000073 249 4:55:09.047 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000776, "shell", 0, MAXIMUM_ALLOWED, 0x0015e634 ) ERROR_SUCCESS 0.0000268 250 4:55:09.047 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x000001ea, NULL, NULL, 0x01dbe428, 0x01dbe430, 0x01dbe424 ) ERROR_SUCCESS 0.0000232 251 4:55:09.047 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000001ea, "open", 0, MAXIMUM_ALLOWED, 0x0015e784 ) ERROR_SUCCESS 0.0000288 252 4:55:09.047 AM 1 SHLWAPI.dll RegCloseKey ( 0x000001ea ) ERROR_SUCCESS 0.0000073 253 4:55:09.047 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000776, NULL, 0, MAXIMUM_ALLOWED, 0x01dbe5a0 ) ERROR_SUCCESS 0.0000514 254 4:55:09.047 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000074e ) ERROR_SUCCESS 0.0000067 255 4:55:09.047 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000776 ) ERROR_SUCCESS 0.0000073 256 4:55:09.047 AM 1 ieframe.dll ShellExecuteExW ( 0x02750058 ) TRUE 5.4387519 257 4:55:09.047 AM 1 SHELL32.dll SHRegGetBoolUSValueW ( "Software\Microsoft\Windows\CurrentVersion\Explorer", "MaximizeApps", FALSE, FALSE ) FALSE 0.0000995 258 4:55:09.047 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer", 0, KEY_QUERY_VALUE, 0x02765e48 ) ERROR_SUCCESS 0.0000237 259 4:55:09.047 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000774, "MaximizeApps", NULL, 0x01dbe224, 0x01dbe228, 0x01dbe220 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 260 4:55:09.047 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer", 0, KEY_QUERY_VALUE, 0x02765e50 ) ERROR_SUCCESS 0.0000129 261 4:55:09.047 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000074c, "MaximizeApps", NULL, 0x01dbe224, 0x01dbe228, 0x01dbe220 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000053 262 4:55:09.047 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000059 263 4:55:09.047 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000774 ) ERROR_SUCCESS 0.0000056 264 4:55:09.047 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2e83c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0007789 265 4:55:09.057 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2e820 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 266 4:55:09.057 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2e820 ) S_OK 0.0000045 267 4:55:09.057 AM 1 SHELL32.dll IsOS ( 28 ) FALSE 0.0000056 268 4:55:09.057 AM 1 SHELL32.dll PathIsDirectoryW ( "C:\Documents and Settings\Administrator" ) TRUE 0.0000263 269 4:55:09.057 AM 1 SHELL32.dll UrlIsW ( "https://google.com/", URLIS_URL ) TRUE 0.0000050 270 4:55:09.057 AM 1 SHELL32.dll StrCpyNW ( 0x02771994, "https://google.com/", 2084 ) 0x02771994 0.0000042 271 4:55:09.057 AM 1 SHELL32.dll PathUnquoteSpacesW ( "https://google.com/" ) 0.0000045 272 4:55:09.057 AM 1 SHELL32.dll StrDupW ( "https://google.com/" ) 0x0015e3b0 0.0000056 273 4:55:09.057 AM 1 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x01dbe4d4 ) S_OK 0.0000047 274 4:55:09.057 AM 1 SHELL32.dll PathIsUNCW ( "https://google.com/" ) FALSE 0.0000042 275 4:55:09.057 AM 1 SHELL32.dll UrlIsW ( "https://google.com/", URLIS_URL ) TRUE 0.0000047 276 4:55:09.057 AM 1 SHELL32.dll ParseURLW ( "https://google.com/", 0x01dbe3b8 ) S_OK 0.0000050 277 4:55:09.057 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace", 0, KEY_READ, 0x01dbe394 ) ERROR_SUCCESS 0.0000168 278 4:55:09.057 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000320, "{11016101-E366-4D22-BC06-4ADA335C892B}", 0, KEY_READ, 0x01dbe38c ) ERROR_SUCCESS 0.0000101 279 4:55:09.057 AM 1 SHELL32.dll SHGetValueW ( 0x00000754, NULL, "SuppressionPolicy", NULL, 0x01dbe374, 0x01dbe368 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 280 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000754, "SuppressionPolicy", NULL, 0x01dbe21c, 0x01dbe374, 0x01dbe368 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 281 4:55:09.057 AM 1 SHELL32.dll GUIDFromStringW ( "{11016101-E366-4D22-BC06-4ADA335C892B}", {00140008-23ff-77e6-0000-0000f8d01802} ) TRUE 0.0000059 282 4:55:09.057 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000059 283 4:55:09.057 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000320, "{1f4de370-d627-11d1-ba4f-00a0c91eedba}", 0, KEY_READ, 0x01dbe38c ) ERROR_SUCCESS 0.0000098 284 4:55:09.057 AM 1 SHELL32.dll SHGetValueW ( 0x00000754, NULL, "SuppressionPolicy", NULL, 0x01dbe374, 0x01dbe368 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 285 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000754, "SuppressionPolicy", NULL, 0x01dbe21c, 0x01dbe374, 0x01dbe368 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 286 4:55:09.057 AM 1 SHELL32.dll GUIDFromStringW ( "{1f4de370-d627-11d1-ba4f-00a0c91eedba}", IE History and Feeds Shell Data Source for Windows Search ) TRUE 0.0000056 287 4:55:09.057 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000059 288 4:55:09.057 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000320, "{450D8FBA-AD25-11D0-98A8-0800361B1103}", 0, KEY_READ, 0x01dbe38c ) ERROR_SUCCESS 0.0000103 289 4:55:09.057 AM 1 SHELL32.dll SHGetValueW ( 0x00000754, NULL, "SuppressionPolicy", NULL, 0x01dbe374, 0x01dbe368 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 290 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000754, "SuppressionPolicy", NULL, 0x01dbe21c, 0x01dbe374, 0x01dbe368 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 291 4:55:09.057 AM 1 SHELL32.dll GUIDFromStringW ( "{450D8FBA-AD25-11D0-98A8-0800361B1103}", Computer Search Results Folder ) TRUE 0.0000056 292 4:55:09.057 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000056 293 4:55:09.057 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000320, "{645FF040-5081-101B-9F08-00AA002F954E}", 0, KEY_READ, 0x01dbe38c ) ERROR_SUCCESS 0.0000092 294 4:55:09.057 AM 1 SHELL32.dll SHGetValueW ( 0x00000754, NULL, "SuppressionPolicy", NULL, 0x01dbe374, 0x01dbe368 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000142 295 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000754, "SuppressionPolicy", NULL, 0x01dbe21c, 0x01dbe374, 0x01dbe368 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 296 4:55:09.057 AM 1 SHELL32.dll GUIDFromStringW ( "{645FF040-5081-101B-9F08-00AA002F954E}", {450d8fba-ad25-11d0-98a8-0800361b1103} ) TRUE 0.0000053 297 4:55:09.057 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000081 298 4:55:09.057 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000320, "{e17d4fc0-5564-11d1-83f2-00a0c90dc849}", 0, KEY_READ, 0x01dbe38c ) ERROR_SUCCESS 0.0000212 299 4:55:09.057 AM 1 SHELL32.dll SHGetValueW ( 0x00000754, NULL, "SuppressionPolicy", NULL, 0x01dbe374, 0x01dbe368 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000156 300 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000754, "SuppressionPolicy", NULL, 0x01dbe21c, 0x01dbe374, 0x01dbe368 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 301 4:55:09.057 AM 1 SHELL32.dll GUIDFromStringW ( "{e17d4fc0-5564-11d1-83f2-00a0c90dc849}", Recycle Bin ) TRUE 0.0000053 302 4:55:09.057 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000059 303 4:55:09.057 AM 1 SHELL32.dll RegCloseKey ( 0x00000320 ) ERROR_SUCCESS 0.0000053 304 4:55:09.057 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CURRENT_USER, "Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace", 0, KEY_READ, 0x01dbe394 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000131 305 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000000c8, NULL, 0, MAXIMUM_ALLOWED, 0x01dbe3a4 ) ERROR_SUCCESS 0.0000101 306 4:55:09.057 AM 1 SHELL32.dll RegCreateKeyExW ( 0x00000320, "SessionInfo\0000000000012002", 0, NULL, REG_OPTION_VOLATILE, KEY_QUERY_VALUE, NULL, 0x01dbe44c, 0x01dbe440 ) ERROR_SUCCESS 0.0000106 307 4:55:09.057 AM 1 SHELL32.dll RegCloseKey ( 0x00000320 ) ERROR_SUCCESS 0.0000056 308 4:55:09.057 AM 1 SHELL32.dll RegOpenKeyExW ( 0x00000754, "Desktop\NameSpace", 0, KEY_READ, 0x01dbe398 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 309 4:55:09.057 AM 1 SHELL32.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000053 310 4:55:09.057 AM 1 SHELL32.dll SHSkipJunction ( 0x00167880, My Computer ) FALSE 0.0000053 311 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe440 ) ERROR_SUCCESS 0.0000268 312 4:55:09.057 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000313 313 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, 0x01dbe2f8, NULL, 0x01dbe2d8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000226 314 4:55:09.057 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000061 315 4:55:09.057 AM 1 SHELL32.dll SHSkipJunction ( 0x00167880, My Network Places ) FALSE 0.0000050 316 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe440 ) ERROR_SUCCESS 0.0000196 317 4:55:09.057 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000282 318 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, 0x01dbe2f8, NULL, 0x01dbe2d8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 319 4:55:09.057 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000056 320 4:55:09.057 AM 1 SHELL32.dll SHSkipJunction ( 0x00167880, {871c5380-42a0-1069-a2ea-08002b30309d} ) FALSE 0.0000047 321 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\ShellFolder", 0, MAXIMUM_ALLOWED, 0x01dbe440 ) ERROR_SUCCESS 0.0000229 322 4:55:09.057 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000296 323 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "WantsParseDisplayName", NULL, 0x01dbe2f8, NULL, 0x01dbe2d8 ) ERROR_SUCCESS 0.0000210 324 4:55:09.057 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000056 325 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_QUERY_VALUE, 0x01dbe234 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 326 4:55:09.057 AM 1 SHELL32.dll StrCpyNW ( 0x01dbe254, "{871C5380-42A0-1069-A2EA-08002B30309D}", 103 ) 0x01dbe254 0.0000045 327 4:55:09.057 AM 1 SHELL32.dll StrCpyNW ( 0x01dbdda0, "CLSID\", 167 ) 0x01dbdda0 0.0000045 328 4:55:09.057 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\", "{871C5380-42A0-1069-A2EA-08002B30309D}", 167 ) 0x01dbdda0 0.0000045 329 4:55:09.057 AM 1 SHELL32.dll StrCatBuffW ( "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}", "\InProcServer32", 167 ) 0x01dbdda0 0.0000045 330 4:55:09.057 AM 1 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\InProcServer32", 0, KEY_QUERY_VALUE, 0x01dbdd9c ) ERROR_SUCCESS 0.0000190 331 4:55:09.057 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, NULL, NULL, NULL, 0x01dbe04c, 0x01dbdd94 ) ERROR_SUCCESS 0.0000285 332 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x01dbdc3c, 0x01dbe04c, 0x01dbdd94 ) ERROR_SUCCESS 0.0000196 333 4:55:09.057 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000756, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000299 334 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "LoadWithoutCOM", NULL, 0x01dbdc3c, NULL, 0x01dbdc1c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000212 335 4:55:09.057 AM 1 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000059 336 4:55:09.057 AM 1 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\ieframe.dll" ) 0x01dbe074 0.0000045 337 4:55:09.057 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000340, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 338 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000340, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, 0x01dbddd8, NULL, 0x01dbddb8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 339 4:55:09.057 AM 1 SHELL32.dll SHQueryValueExW ( 0x00000328, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000140 340 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000328, "{871C5380-42A0-1069-A2EA-08002B30309D}", NULL, 0x01dbddd8, NULL, 0x01dbddb8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 341 4:55:09.057 AM 1 SHELL32.dll RegQueryValueExW ( 0x00000334, "{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x01dbdb94, 0x01dbdb88, 0x01dbdb9c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 342 4:55:09.057 AM 1 SHELL32.dll RegQueryValueExW ( 0x00000330, "{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x01dbdb94, 0x01dbdb78, 0x01dbdb9c ) ERROR_SUCCESS 0.0000084 343 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{871C5380-42A0-1069-A2EA-08002B30309D}", 0, KEY_QUERY_VALUE, 0x01dbddf0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000142 344 4:55:09.057 AM 1 urlmon.dll StrCmpNICW ( "https://google.com/", "https", 5 ) 0 0.0000042 345 4:55:09.057 AM 1 urlmon.dll StrCmpNW ( "://google.com/", "://", 3 ) 0 0.0000045 346 4:55:09.057 AM 1 SHELL32.dll UrlIsW ( "https://google.com/", URLIS_URL ) TRUE 0.0000050 347 4:55:09.057 AM 1 SHELL32.dll PathIsUNCW ( "https://google.com/" ) FALSE 0.0000042 348 4:55:09.057 AM 1 SHELL32.dll AssocCreate ( Query file associations, IQueryAssociations, 0x027779c0 ) S_OK 0.0000140 349 4:55:09.057 AM 1 SHELL32.dll QISearch ( 0x00170cd0, 0x7c92b550, IQueryAssociations, 0x027779c0 ) S_OK 0.0000042 350 4:55:09.057 AM 1 SHELL32.dll AssocCreate ( {9016d0dd-7c41-46cc-a664-bf22f7cb186a}, {b3dcb623-4280-4eb1-84b3-8d07e84f299a}, 0x01dbe4a8 ) S_OK 0.0000059 351 4:55:09.057 AM 1 SHELL32.dll QuerySourceCreateFromKey ( 0x000001ea, NULL, FALSE, {c7478486-7583-49e7-a6c2-faf8f02bc30e}, 0x01dbe4ac ) S_OK 0.0000335 352 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000001ea, NULL, 0, MAXIMUM_ALLOWED, 0x0015e88c ) ERROR_SUCCESS 0.0000243 353 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000756, "shell", 0, MAXIMUM_ALLOWED, 0x0015e784 ) ERROR_SUCCESS 0.0000240 354 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000322, NULL, NULL, 0x01dbe2a4, 0x01dbe2ac, 0x01dbe2a0 ) ERROR_SUCCESS 0.0000179 355 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000322, "open", 0, MAXIMUM_ALLOWED, 0x0015e6c4 ) ERROR_SUCCESS 0.0000207 356 4:55:09.057 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000067 357 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, "command", 0, KEY_QUERY_VALUE, 0x01dbe174 ) ERROR_SUCCESS 0.0000254 358 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000322, "command", NULL, 0x01dbe170, 0x01dbe180, 0x01dbe178 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000187 359 4:55:09.057 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000059 360 4:55:09.057 AM 1 SHELL32.dll PathFindExtensionW ( "https://google.com/" ) 0x027719b0 0.0000042 361 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, "command", 0, KEY_QUERY_VALUE, 0x01dbe10c ) ERROR_SUCCESS 0.0000207 362 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000322, NULL, NULL, 0x01dbe15c, 0x01dbe164, 0x01dbe158 ) ERROR_SUCCESS 0.0000179 363 4:55:09.057 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000056 364 4:55:09.057 AM 1 SHELL32.dll StrCpyNW ( 0x0277653c, ""C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome", 2084 ) 0x0277653c 0.0000045 365 4:55:09.057 AM 1 SHELL32.dll SHUnicodeToUnicode ( ""C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome", 0x02773c2c, 2084 ) 58 0.0000045 366 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, "ddeexec", 0, KEY_QUERY_VALUE, 0x01dbe100 ) ERROR_SUCCESS 0.0000411 367 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000322, NULL, NULL, 0x01dbe150, 0x01dbe158, 0x01dbe14c ) ERROR_SUCCESS 0.0000190 368 4:55:09.057 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000059 369 4:55:09.057 AM 1 SHELL32.dll StrCpyNW ( 0x0277653c, ""%1",,-1,0,,,,", 2084 ) 0x0277653c 0.0000042 370 4:55:09.057 AM 1 SHELL32.dll SHUnicodeToUnicode ( ""%1",,-1,0,,,,", 0x02774c74, 260 ) 15 0.0000042 371 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, "ddeexec", 0, KEY_QUERY_VALUE, 0x01dbe270 ) ERROR_SUCCESS 0.0000204 372 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000322, "NoActivateHandler", NULL, 0x01dbe258, NULL, 0x01dbe238 ) ERROR_SUCCESS 0.0000184 373 4:55:09.057 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000053 374 4:55:09.057 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, "ddeexec\application", 0, KEY_QUERY_VALUE, 0x01dbe100 ) ERROR_SUCCESS 0.0000257 375 4:55:09.057 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000322, NULL, NULL, 0x01dbe150, 0x01dbe158, 0x01dbe14c ) ERROR_SUCCESS 0.0008585 376 4:55:09.067 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000059 377 4:55:09.067 AM 1 SHELL32.dll StrCpyNW ( 0x0277653c, "IExplore", 2084 ) 0x0277653c 0.0000042 378 4:55:09.067 AM 1 SHELL32.dll SHUnicodeToUnicode ( "IExplore", 0x02777584, 260 ) 9 0.0000042 379 4:55:09.067 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, "ddeexec\topic", 0, KEY_QUERY_VALUE, 0x01dbe100 ) ERROR_SUCCESS 0.0000274 380 4:55:09.067 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000322, NULL, NULL, 0x01dbe150, 0x01dbe158, 0x01dbe14c ) ERROR_SUCCESS 0.0000193 381 4:55:09.067 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000059 382 4:55:09.067 AM 1 SHELL32.dll StrCpyNW ( 0x0277653c, "WWW_OpenURL", 2084 ) 0x0277653c 0.0000042 383 4:55:09.067 AM 1 SHELL32.dll SHUnicodeToUnicode ( "WWW_OpenURL", 0x02777584, 260 ) 12 0.0000042 384 4:55:09.067 AM 1 SHELL32.dll StrCpyNW ( 0x02778990, "", 4232 ) 0x02778990 0.0000042 385 4:55:09.067 AM 1 SHELL32.dll StrCpyNW ( 0x02778992, "https://google.com/", 20 ) 0x02778992 0.0000045 386 4:55:09.067 AM 1 SHELL32.dll StrCpyNW ( 0x00112508, ""https://google.com/",,-1,0,,,,", 32 ) 0x00112508 0.0000045 387 4:55:09.067 AM 1 SHELL32.dll StrCpyNW ( 0x000e6fbc, ""https://google.com/",,-1,0,,,,", 520 ) 0x000e6fbc 0.0000045 388 4:55:09.067 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2e824 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000047 389 4:55:09.067 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2e808 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 390 4:55:09.067 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2e808 ) S_OK 0.0000045 391 4:55:09.067 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e428, ""https://google.com/",,-1,0,,,,", 520 ) 0x00f2e428 0.0000047 392 4:55:09.067 AM 1 SHELL32.dll SHIsLowMemoryMachine ( 0 ) FALSE 0.0000050 393 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000187 394 4:55:09.067 AM 2 MSCTF.dll RegEnumKeyExA ( 0x0000074c, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000112 395 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( 0x0000074c, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{246ECB87-C2F2-4ABE-905B-C8B38ADD2C43}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000366 396 4:55:09.067 AM 2 MSCTF.dll RegEnumKeyExA ( 0x0000074c, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000095 397 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( 0x0000074c, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{246ECB87-C2F2-4ABE-905B-C8B38ADD2C43}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000184 398 4:55:09.067 AM 2 MSCTF.dll RegQueryValueExA ( 0x0000048c, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000092 399 4:55:09.067 AM 2 MSCTF.dll RegCloseKey ( 0x0000048c ) ERROR_SUCCESS 0.0000081 400 4:55:09.067 AM 2 MSCTF.dll RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000073 401 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000165 402 4:55:09.067 AM 2 MSCTF.dll RegEnumKeyExA ( 0x0000074c, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000103 403 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( 0x0000074c, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{34745C63-B2F0-4784-8B67-5E12C8701A31}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000162 404 4:55:09.067 AM 2 MSCTF.dll RegEnumKeyExA ( 0x0000074c, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000098 405 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( 0x0000074c, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{34745C63-B2F0-4784-8B67-5E12C8701A31}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000184 406 4:55:09.067 AM 2 MSCTF.dll RegQueryValueExA ( 0x0000048c, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000095 407 4:55:09.067 AM 2 MSCTF.dll RegCloseKey ( 0x0000048c ) ERROR_SUCCESS 0.0000092 408 4:55:09.067 AM 2 MSCTF.dll RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000081 409 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000179 410 4:55:09.067 AM 2 MSCTF.dll RegEnumKeyExA ( 0x0000074c, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000098 411 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( 0x0000074c, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{5130A009-5540-4FCF-97EB-AAD33FC0EE09}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 412 4:55:09.067 AM 2 MSCTF.dll RegEnumKeyExA ( 0x0000074c, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000078 413 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( 0x0000074c, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{5130A009-5540-4FCF-97EB-AAD33FC0EE09}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000140 414 4:55:09.067 AM 2 MSCTF.dll RegQueryValueExA ( 0x0000048c, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000061 415 4:55:09.067 AM 2 MSCTF.dll RegCloseKey ( 0x0000048c ) ERROR_SUCCESS 0.0000056 416 4:55:09.067 AM 2 MSCTF.dll RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000056 417 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000137 418 4:55:09.067 AM 2 MSCTF.dll RegEnumKeyExA ( 0x0000074c, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000070 419 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( 0x0000074c, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{7AE86BB7-262C-431E-9111-C974B6B7CAC3}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000129 420 4:55:09.067 AM 2 MSCTF.dll RegEnumKeyExA ( 0x0000074c, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000070 421 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( 0x0000074c, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{7AE86BB7-262C-431E-9111-C974B6B7CAC3}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000187 422 4:55:09.067 AM 2 MSCTF.dll RegQueryValueExA ( 0x0000048c, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000061 423 4:55:09.067 AM 2 MSCTF.dll RegCloseKey ( 0x0000048c ) ERROR_SUCCESS 0.0000056 424 4:55:09.067 AM 2 MSCTF.dll RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000053 425 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000106 426 4:55:09.067 AM 2 MSCTF.dll RegEnumKeyExA ( 0x0000074c, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000067 427 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( 0x0000074c, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{B5A73CD1-8355-426B-A161-259808F26B14}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 428 4:55:09.067 AM 2 MSCTF.dll RegEnumKeyExA ( 0x0000074c, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 429 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( 0x0000074c, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{B5A73CD1-8355-426B-A161-259808F26B14}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000123 430 4:55:09.067 AM 2 MSCTF.dll RegQueryValueExA ( 0x0000048c, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000059 431 4:55:09.067 AM 2 MSCTF.dll RegCloseKey ( 0x0000048c ) ERROR_SUCCESS 0.0000053 432 4:55:09.067 AM 2 MSCTF.dll RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000053 433 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000106 434 4:55:09.067 AM 2 MSCTF.dll RegEnumKeyExA ( 0x0000074c, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000067 435 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( 0x0000074c, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 436 4:55:09.067 AM 2 MSCTF.dll RegEnumKeyExA ( 0x0000074c, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 437 4:55:09.067 AM 2 MSCTF.dll RegOpenKeyExA ( 0x0000074c, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000123 438 4:55:09.067 AM 2 MSCTF.dll RegQueryValueExA ( 0x0000048c, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000061 439 4:55:09.067 AM 2 MSCTF.dll RegCloseKey ( 0x0000048c ) ERROR_SUCCESS 0.0000056 440 4:55:09.067 AM 2 MSCTF.dll RegCloseKey ( 0x0000074c ) ERROR_SUCCESS 0.0000053 441 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, "ddeexec\ifexec", 0, KEY_QUERY_VALUE, 0x01dbe0e0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000318 442 4:55:09.077 AM 1 SHELL32.dll StrCmpNW ( ""C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome", "%1", 2 ) -1 0.0000053 443 4:55:09.077 AM 1 SHELL32.dll StrCmpNW ( ""C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome", ""%1"", 4 ) 1 0.0000045 444 4:55:09.077 AM 1 SHELL32.dll StrCmpIW ( ""C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome", ""C:\Program Files\Common Files\Adobe\WorkFlow\AdobeWorkGroupHelper.exe "%1""" ) 1 0.0000045 445 4:55:09.077 AM 1 SHELL32.dll PathFindExtensionW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02774ed2 0.0000047 446 4:55:09.077 AM 1 SHELL32.dll PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02774ec2 0.0000050 447 4:55:09.077 AM 1 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE" ) 0x01dbe0e0 0.0000045 448 4:55:09.077 AM 1 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", "UseShortName", NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000531 449 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", 0, KEY_QUERY_VALUE, 0x01dbdf2c ) ERROR_SUCCESS 0.0000221 450 4:55:09.077 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000320, "UseShortName", NULL, 0x01dbdf14, NULL, 0x01dbdef4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 451 4:55:09.077 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000320 ) ERROR_SUCCESS 0.0000059 452 4:55:09.077 AM 1 SHELL32.dll StrChrW ( "https://google.com/", ' ' ) NULL 0.0000042 453 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000756, "shell", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_SUCCESS 0.0000246 454 4:55:09.077 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000322, NULL, NULL, 0x01dbe028, 0x01dbe030, 0x01dbe024 ) ERROR_SUCCESS 0.0000179 455 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000322, "open", 0, MAXIMUM_ALLOWED, 0x000c5c0c ) ERROR_SUCCESS 0.0000212 456 4:55:09.077 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000061 457 4:55:09.077 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000079e, "FriendlyAppName", NULL, 0x01dbde90, 0x01dbde98, 0x01dbde8c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000173 458 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x0000079e, "command", 0, KEY_QUERY_VALUE, 0x01dbde00 ) ERROR_SUCCESS 0.0000246 459 4:55:09.077 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000322, NULL, NULL, 0x01dbde50, 0x01dbde58, 0x01dbde4c ) ERROR_SUCCESS 0.0000176 460 4:55:09.077 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000056 461 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_SUCCESS 0.0000210 462 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000322, "shell", 0, MAXIMUM_ALLOWED, 0x0015e784 ) ERROR_SUCCESS 0.0000240 463 4:55:09.077 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000076a, NULL, NULL, 0x01dbdf9c, 0x01dbdfa4, 0x01dbdf98 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000176 464 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x0000076a, "open", 0, MAXIMUM_ALLOWED, 0x000c5c6c ) ERROR_SUCCESS 0.0000235 465 4:55:09.077 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000076a ) ERROR_SUCCESS 0.0000056 466 4:55:09.077 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000286, "FriendlyAppName", NULL, 0x01dbde04, 0x01dbde0c, 0x01dbde00 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 467 4:55:09.077 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000286 ) ERROR_SUCCESS 0.0000056 468 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x01dbde98 ) ERROR_SUCCESS 0.0000109 469 4:55:09.077 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x00000284, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x01dbde88, 0x01dbdf20, 0x01dbdf10 ) ERROR_SUCCESS 0.0000223 470 4:55:09.077 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 471 4:55:09.077 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000322 ) ERROR_SUCCESS 0.0000056 472 4:55:09.077 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000079e ) ERROR_SUCCESS 0.0000056 473 4:55:09.077 AM 1 SHELL32.dll StrCpyNW ( 0x0277653c, "Internet Explorer", 2084 ) 0x0277653c 0.0000045 474 4:55:09.077 AM 1 SHELL32.dll SHUnicodeToUnicode ( "Internet Explorer", 0x0277528c, 260 ) 18 0.0000045 475 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( 0x00000196, "command", 0, KEY_QUERY_VALUE, 0x01dbdeac ) ERROR_SUCCESS 0.0000254 476 4:55:09.077 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000079e, NULL, NULL, 0x01dbdefc, 0x01dbdf04, 0x01dbdef8 ) ERROR_SUCCESS 0.0000176 477 4:55:09.077 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000079e ) ERROR_SUCCESS 0.0000056 478 4:55:09.077 AM 1 SHELL32.dll StrCpyNW ( 0x0277653c, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", 2084 ) 0x0277653c 0.0000045 479 4:55:09.077 AM 1 SHELL32.dll SHUnicodeToUnicode ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE", 0x02775084, 260 ) 48 0.0000047 480 4:55:09.077 AM 1 SHELL32.dll PathIsUNCW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) FALSE 0.0000042 481 4:55:09.077 AM 1 SHELL32.dll PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02774ec2 0.0000045 482 4:55:09.077 AM 1 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE" ) 0x027765b4 0.0000045 483 4:55:09.077 AM 1 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", "AppendPath", NULL, 0x01dbe4d0, 0x01dbe4d8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000413 484 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", 0, KEY_QUERY_VALUE, 0x01dbe390 ) ERROR_SUCCESS 0.0000131 485 4:55:09.077 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000079c, "AppendPath", NULL, 0x01dbe378, 0x01dbe4d0, 0x01dbe4d8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 486 4:55:09.077 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000079c ) ERROR_SUCCESS 0.0000056 487 4:55:09.077 AM 1 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", "PATH", NULL, 0x0277653c, 0x01dbe4d8 ) ERROR_SUCCESS 0.0000399 488 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", 0, KEY_QUERY_VALUE, 0x01dbe390 ) ERROR_SUCCESS 0.0000109 489 4:55:09.077 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000079c, "PATH", NULL, 0x01dbe378, 0x0277653c, 0x01dbe4d8 ) ERROR_SUCCESS 0.0000067 490 4:55:09.077 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000079c ) ERROR_SUCCESS 0.0000056 491 4:55:09.077 AM 1 SHELL32.dll StrCpyW ( "C:\WINDOWS\system32;C:\WINDOWS;C:\WIC:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem", "C:\Program Files\Internet Explorer;" ) 0x00150a7e 0.0000047 492 4:55:09.077 AM 1 SHELL32.dll IsOS ( 24 ) FALSE 0.0000045 493 4:55:09.077 AM 1 SHELL32.dll PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02774ec2 0.0000045 494 4:55:09.077 AM 1 SHELL32.dll PathFindExtensionW ( "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE" ) 0x01dbd824 0.0000045 495 4:55:09.077 AM 1 SHELL32.dll SHGetValueW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", "RunAsOnNonAdminInstall", NULL, 0x01dbd7a8, 0x01dbd7a4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0006914 496 4:55:09.077 AM 1 SHLWAPI.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows\CurrentVersion\App Paths\IEXPLORE.EXE", 0, KEY_QUERY_VALUE, 0x01dbd66c ) ERROR_SUCCESS 0.0000159 497 4:55:09.077 AM 1 SHLWAPI.dll RegQueryValueExW ( 0x0000079c, "RunAsOnNonAdminInstall", NULL, 0x01dbd654, 0x01dbd7a8, 0x01dbd7a4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0006523 498 4:55:09.087 AM 1 SHLWAPI.dll RegCloseKey ( 0x0000079c ) ERROR_SUCCESS 0.0000059 499 4:55:09.087 AM 1 SHELL32.dll PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02774ec2 0.0000045 500 4:55:09.087 AM 1 SHELL32.dll PathMatchSpecW ( "I", "*" ) FALSE 0 = The operation completed successfully. 0.0000061 501 4:55:09.107 AM 3 BROWSEUI.dll SHIsChildOrSelf ( 0x0001008c, 0x0001008e ) S_OK 0.0000184 502 4:55:09.107 AM 3 BROWSEUI.dll SHIsChildOrSelf ( 0x0001006c, 0x0001008e ) S_OK 0.0000045 503 4:55:09.107 AM 2 Explorer.EXE PathFindFileNameW ( "" ) 0x00f2f8fc 0.0000047 504 4:55:09.107 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x02160a60 ) S_OK 0.0000045 505 4:55:09.107 AM 2 comctl32.dll QISearch ( 0x02160a30, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000f59cc ) S_OK 0.0000042 506 4:55:09.107 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f624 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000732 507 4:55:09.107 AM 2 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000045 508 4:55:09.107 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f4c4 ) S_OK 0.0000073 509 4:55:09.107 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x000c5a44 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000363 510 4:55:09.107 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 511 4:55:09.107 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3c4, "", 260 ) 0x00f2f3c4 0.0000045 512 4:55:09.107 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 513 4:55:09.107 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 514 4:55:09.107 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f38c, "", 260 ) 0x00f2f38c 0.0000042 515 4:55:09.107 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 516 4:55:09.107 AM 2 SHELL32.dll PathIsUNCW ( "" ) FALSE 0.0000045 517 4:55:09.107 AM 2 SHELL32.dll PathGetDriveNumberW ( "" ) -1 0.0000045 518 4:55:09.107 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 519 4:55:09.107 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f384, "", 260 ) 0x00f2f384 0.0000039 520 4:55:09.107 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 521 4:55:09.107 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f810 ) S_OK 0.0000045 522 4:55:09.107 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2f8d0, 0x00f2f8c8 ) ERROR_SUCCESS 0.0000212 523 4:55:09.107 AM 2 Explorer.EXE RegSetValueExW ( 0x0000078c, "ProgramCount", 0, REG_DWORD, 0x00f2f8cc, 4 ) ERROR_SUCCESS 0.0000087 524 4:55:09.107 AM 2 Explorer.EXE RegCloseKey ( 0x0000078c ) ERROR_SUCCESS 0.0000061 525 4:55:09.107 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f048 ) S_OK 0.0000045 526 4:55:09.107 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000047 527 4:55:09.107 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000042 528 4:55:09.107 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f0b0 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000542 529 4:55:09.107 AM 2 SHELL32.dll QISearch ( 0x00170c80, 0x7c92b550, IQueryAssociations, 0x00f2ef58 ) S_OK 0.0000042 530 4:55:09.107 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2ef1c ) S_OK 0.0000061 531 4:55:09.107 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x000c5a44 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000210 532 4:55:09.208 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000050 533 4:55:09.208 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000045 534 4:55:09.208 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000659 535 4:55:09.208 AM 2 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000042 536 4:55:09.208 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000075 537 4:55:09.208 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x000c5c6c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000282 538 4:55:09.638 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000087 539 4:55:09.638 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000045 540 4:55:09.638 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000670 541 4:55:09.638 AM 2 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000042 542 4:55:09.638 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000073 543 4:55:09.638 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x000c5c6c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000293 544 4:55:10.269 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000059 545 4:55:10.269 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000047 546 4:55:10.269 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f704 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0001070 547 4:55:10.269 AM 2 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000042 548 4:55:10.269 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000081 549 4:55:10.269 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x000c5c6c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000670 550 4:55:10.529 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000053 551 4:55:10.590 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2fa78 ) S_OK 0.0000075 552 4:55:10.590 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2faec, 0x00f2fae4 ) ERROR_SUCCESS 0.0000218 553 4:55:10.590 AM 2 Explorer.EXE RegSetValueExW ( 0x00000574, "ProgramCount", 0, REG_DWORD, 0x00f2fae8, 4 ) ERROR_SUCCESS 0.0000106 554 4:55:10.590 AM 2 Explorer.EXE RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000081 555 4:55:10.590 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000047 556 4:55:11.881 AM 1 SHELL32.dll StrCpyNW ( 0x02778990, "", 4232 ) 0x02778990 0.0000050 557 4:55:11.881 AM 1 SHELL32.dll StrCpyNW ( 0x02778992, "https://google.com/", 20 ) 0x02778992 0.0000042 558 4:55:11.881 AM 1 SHELL32.dll StrCpyNW ( 0x00114898, ""https://google.com/",,-1,0,,,,", 32 ) 0x00114898 0.0000042 559 4:55:11.881 AM 1 SHELL32.dll StrCpyNW ( 0x000e6fbc, ""https://google.com/",,-1,0,,,,", 520 ) 0x000e6fbc 0.0000045 560 4:55:11.881 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fc64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000050 561 4:55:11.881 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 562 4:55:11.881 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) S_OK 0.0000045 563 4:55:11.881 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f868, ""https://google.com/",,-1,0,,,,", 520 ) 0x00f2f868 0.0000045 564 4:55:11.881 AM 1 SHELL32.dll SHIsLowMemoryMachine ( 0 ) FALSE 0.0000056 565 4:55:12.132 AM 2 Explorer.EXE PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x00f2f942 0.0000056 566 4:55:12.132 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x0215fe30 ) S_OK 0.0000047 567 4:55:12.132 AM 2 comctl32.dll QISearch ( 0x0215fe00, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000f59cc ) S_OK 0.0000042 568 4:55:12.132 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f624 ) S_OK 0.0001173 569 4:55:12.132 AM 2 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000042 570 4:55:12.132 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f4c4 ) S_OK 0.0000073 571 4:55:12.132 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_SUCCESS 0.0000330 572 4:55:12.132 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000079e, NULL, 0, MAXIMUM_ALLOWED, 0x00f2f498 ) ERROR_SUCCESS 0.0000274 573 4:55:12.132 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000079e ) ERROR_SUCCESS 0.0000067 574 4:55:12.132 AM 2 Explorer.EXE SHGetValueW ( 0x00000576, NULL, "TaskbarGroupIcon", NULL, 0x00f2f628, 0x00f2f620 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000274 575 4:55:12.132 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000576, "TaskbarGroupIcon", NULL, 0x00f2f4c8, 0x00f2f628, 0x00f2f620 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 576 4:55:12.132 AM 2 Explorer.EXE RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000056 577 4:55:12.132 AM 2 SHELL32.dll PathFindFileNameW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02160a76 0.0000045 578 4:55:12.132 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3c4, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", 260 ) 0x00f2f3c4 0.0000045 579 4:55:12.132 AM 2 Explorer.EXE AssocQueryStringW ( 66, ASSOCSTR_FRIENDLYAPPNAME, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f7e4, 0x00f2f598 ) S_OK 0.0002601 580 4:55:12.132 AM 2 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f470 ) S_OK 0.0000045 581 4:55:12.132 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f434 ) S_OK 0.0000061 582 4:55:12.132 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x0015e79c ) ERROR_SUCCESS 0.0000207 583 4:55:12.132 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000576, "shell", 0, MAXIMUM_ALLOWED, 0x0015e784 ) ERROR_SUCCESS 0.0000246 584 4:55:12.132 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000079e, NULL, NULL, 0x00f2f220, 0x00f2f228, 0x00f2f21c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 585 4:55:12.132 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000079e, "open", 0, MAXIMUM_ALLOWED, 0x000c5a5c ) ERROR_SUCCESS 0.0000235 586 4:55:12.132 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000079e ) ERROR_SUCCESS 0.0000061 587 4:55:12.132 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000057a, "FriendlyAppName", NULL, 0x00f2f088, 0x00f2f090, 0x00f2f084 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 588 4:55:12.132 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000057a ) ERROR_SUCCESS 0.0000059 589 4:55:12.132 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x00f2f11c ) ERROR_SUCCESS 0.0000106 590 4:55:12.132 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000578, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f10c, 0x00f2f1a4, 0x00f2f194 ) ERROR_SUCCESS 0.0000218 591 4:55:12.132 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000578 ) ERROR_SUCCESS 0.0000056 592 4:55:12.132 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f7e4, "Internet Explorer", 80 ) 0x00f2f7e4 0.0000042 593 4:55:12.132 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000059 594 4:55:12.132 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x02160448 ) S_OK 0.0000042 595 4:55:12.132 AM 2 comctl32.dll QISearch ( 0x02160418, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000f59fc ) S_OK 0.0000045 596 4:55:12.132 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f80c ) S_OK 0.0000045 597 4:55:12.132 AM 2 Explorer.EXE AssocQueryStringW ( 66, ASSOCSTR_FRIENDLYAPPNAME, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f606, 0x00f2f3c8 ) S_OK 0.0002417 598 4:55:12.132 AM 2 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f2a0 ) S_OK 0.0000045 599 4:55:12.132 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f264 ) S_OK 0.0000061 600 4:55:12.132 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x000c5c6c ) ERROR_SUCCESS 0.0000210 601 4:55:12.132 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000576, "shell", 0, MAXIMUM_ALLOWED, 0x000c5c0c ) ERROR_SUCCESS 0.0000223 602 4:55:12.132 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000057a, NULL, NULL, 0x00f2f050, 0x00f2f058, 0x00f2f04c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000176 603 4:55:12.132 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000057a, "open", 0, MAXIMUM_ALLOWED, 0x000c5a44 ) ERROR_SUCCESS 0.0000232 604 4:55:12.132 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000057a ) ERROR_SUCCESS 0.0000059 605 4:55:12.132 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000079e, "FriendlyAppName", NULL, 0x00f2eeb8, 0x00f2eec0, 0x00f2eeb4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 606 4:55:12.132 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000079e ) ERROR_SUCCESS 0.0000056 607 4:55:12.132 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000002c0, NULL, 0, MAXIMUM_ALLOWED, 0x00f2ef4c ) ERROR_SUCCESS 0.0000095 608 4:55:12.132 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x0000079c, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2ef3c, 0x00f2efd4, 0x00f2efc4 ) ERROR_SUCCESS 0.0000120 609 4:55:12.132 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000079c ) ERROR_SUCCESS 0.0000056 610 4:55:12.132 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f606, "Internet Explorer", 257 ) 0x00f2f606 0.0000045 611 4:55:12.132 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000056 612 4:55:12.132 AM 2 Explorer.EXE StrCmpW ( "ws Internet Explorer", " - Internet Explorer" ) 1 0.0000047 613 4:55:12.132 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2f8d0, 0x00f2f8c8 ) ERROR_SUCCESS 0.0000112 614 4:55:12.132 AM 2 Explorer.EXE RegSetValueExW ( 0x00000574, "ProgramCount", 0, REG_DWORD, 0x00f2f8cc, 4 ) ERROR_SUCCESS 0.0000257 615 4:55:12.132 AM 2 Explorer.EXE RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000053 616 4:55:12.132 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000047 617 4:55:12.132 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000047 618 4:55:12.162 AM 2 Explorer.EXE PathFindFileNameW ( "" ) 0x00f2f8fc 0.0000070 619 4:55:12.162 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x0218bea8 ) S_OK 0.0000059 620 4:55:12.162 AM 2 comctl32.dll QISearch ( 0x0218be78, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000f5a2c ) S_OK 0.0000056 621 4:55:12.172 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f624 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000710 622 4:55:12.172 AM 2 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000045 623 4:55:12.172 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f4c4 ) S_OK 0.0000075 624 4:55:12.172 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x000c5cfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000324 625 4:55:12.172 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 626 4:55:12.172 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3c4, "", 260 ) 0x00f2f3c4 0.0000042 627 4:55:12.172 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 628 4:55:12.172 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f38c, "", 260 ) 0x00f2f38c 0.0000042 629 4:55:12.172 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000045 630 4:55:12.172 AM 2 SHELL32.dll PathIsUNCW ( "" ) FALSE 0.0000042 631 4:55:12.172 AM 2 SHELL32.dll PathGetDriveNumberW ( "" ) -1 0.0000059 632 4:55:12.172 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 633 4:55:12.172 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f384, "", 260 ) 0x00f2f384 0.0000042 634 4:55:12.172 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 635 4:55:12.172 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f810 ) S_OK 0.0000045 636 4:55:12.172 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2f8d0, 0x00f2f8c8 ) ERROR_SUCCESS 0.0000151 637 4:55:12.172 AM 2 Explorer.EXE RegSetValueExW ( 0x00000574, "ProgramCount", 0, REG_DWORD, 0x00f2f8cc, 4 ) ERROR_SUCCESS 0.0000089 638 4:55:12.172 AM 2 Explorer.EXE RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000061 639 4:55:12.172 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f048 ) S_OK 0.0000073 640 4:55:12.172 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000047 641 4:55:12.172 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000045 642 4:55:12.172 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000045 643 4:55:12.172 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f0b0 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000556 644 4:55:12.172 AM 2 SHELL32.dll QISearch ( 0x00170c80, 0x7c92b550, IQueryAssociations, 0x00f2ef58 ) S_OK 0.0000050 645 4:55:12.172 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2ef1c ) S_OK 0.0000064 646 4:55:12.172 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x000c5cfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000212 647 4:55:12.172 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000045 648 4:55:12.172 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000047 649 4:55:13.183 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2fa78 ) S_OK 0.0000073 650 4:55:13.183 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2faec, 0x00f2fae4 ) ERROR_SUCCESS 0.0000218 651 4:55:13.183 AM 2 Explorer.EXE RegSetValueExW ( 0x0000079c, "ProgramCount", 0, REG_DWORD, 0x00f2fae8, 4 ) ERROR_SUCCESS 0.0000103 652 4:55:13.183 AM 2 Explorer.EXE RegCloseKey ( 0x0000079c ) ERROR_SUCCESS 0.0000084 653 4:55:13.183 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000056 654 4:55:13.183 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000056 655 4:55:13.193 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000050 656 4:55:13.193 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000047 657 4:55:13.193 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f704 ) S_OK 0.0001157 658 4:55:13.193 AM 2 SHELL32.dll QISearch ( 0x00170b90, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000042 659 4:55:13.193 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000078 660 4:55:13.193 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x000c5c0c ) ERROR_SUCCESS 0.0000310 661 4:55:13.193 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x0000079e, NULL, 0, MAXIMUM_ALLOWED, 0x00f2f544 ) ERROR_SUCCESS 0.0000271 662 4:55:13.193 AM 2 SHLWAPI.dll RegCloseKey ( 0x0000079e ) ERROR_SUCCESS 0.0000064 663 4:55:13.193 AM 2 Explorer.EXE RegOpenKeyExW ( 0x00000576, "TaskbarExceptionsIcons", 0, KEY_READ, 0x00f2f71c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000218 664 4:55:13.193 AM 2 Explorer.EXE RegCloseKey ( 0x00000576 ) ERROR_SUCCESS 0.0000056 665 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb44 ) S_OK 0.0000050 666 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb18 ) S_OK 0.0000045 667 4:55:14.435 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 668 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c1cb0, 0x7c8d7268, IShellFolder2, 0x0149faac ) S_OK 0.0000053 669 4:55:14.435 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 670 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c6fd0, 0x7c8d7268, IShellFolder2, 0x0149fa98 ) S_OK 0.0000042 671 4:55:14.435 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 672 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000045 673 4:55:14.435 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Favorites" ) 6 0.0000042 674 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000042 675 4:55:14.435 AM 4 SHELL32.dll StrCmpICW ( "Start Menu", "Favorites" ) 13 0.0000042 676 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000042 677 4:55:14.435 AM 4 SHELL32.dll StrCmpICW ( "Desktop", "Favorites" ) -2 0.0000042 678 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000047 679 4:55:14.435 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "Favorites" ) -5 0.0000042 680 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000045 681 4:55:14.435 AM 4 SHELL32.dll StrCmpICW ( "PrintHood", "Favorites" ) 10 0.0000042 682 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000045 683 4:55:14.435 AM 4 SHELL32.dll StrCmpICW ( "NetHood", "Favorites" ) 8 0.0000042 684 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000045 685 4:55:14.435 AM 4 SHELL32.dll StrCmpICW ( "My Documents", "Favorites" ) 7 0.0000042 686 4:55:14.435 AM 4 SHELL32.dll PathFindExtensionW ( "Favorites" ) 0x02180996 0.0000042 687 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder, 0x0011f1fc ) S_OK 0.0000042 688 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IPersistFolder3, 0x0149f3f0 ) S_OK 0.0000045 689 4:55:14.435 AM 4 SHELL32.dll StrCpyNW ( 0x0149f454, "Favorites", 220 ) 0x0149f454 0.0000045 690 4:55:14.435 AM 4 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Favorites" ) 0x0016f620 0.0000053 691 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f290 ) S_OK 0.0000042 692 4:55:14.435 AM 4 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{20D04FE0-3AEA-1069-A2D8-08002B30309D}", 0, KEY_QUERY_VALUE, 0x0149f060 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 693 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149f258 ) S_OK 0.0000045 694 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c12f0, 0x7c8d6f10, IPersistFolder, 0x0149f1e8 ) S_OK 0.0000045 695 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c12f0, 0x7c8d6f10, {c7264bf0-edb6-11d1-8546-006008059368}, 0x0149f1e4 ) S_OK 0.0000045 696 4:55:14.435 AM 4 SHLWAPI.dll RegOpenKeyExA ( HKEY_CLASSES_ROOT, "CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32", 0, KEY_QUERY_VALUE, 0x0149ef4c ) ERROR_SUCCESS 0.0000285 697 4:55:14.435 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x0000079e, NULL, NULL, 0x0149eeec, 0x0149ef50, 0x0149ef48 ) ERROR_SUCCESS 0.0000254 698 4:55:14.435 AM 4 SHLWAPI.dll RegCloseKey ( 0x0000079e ) ERROR_SUCCESS 0.0000078 699 4:55:14.435 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149ed64, 260 ) 4 0.0000047 700 4:55:14.435 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215fab0 0.0000047 701 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0149f208 ) S_OK 0.0000045 702 4:55:14.435 AM 4 SHELL32.dll StrCpyNW ( 0x0149ed40, "Favorites", 260 ) 0x0149ed40 0.0000042 703 4:55:14.435 AM 4 SHELL32.dll PathFindExtensionW ( "Favorites" ) 0x0149ed52 0.0000042 704 4:55:14.435 AM 4 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 705 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0149f2f8 ) S_OK 0.0000045 706 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IPersistFolder3, 0x0149eb1c ) S_OK 0.0000045 707 4:55:14.435 AM 4 SHELL32.dll StrCpyNW ( 0x0149e8d4, "Documents and Settings", 260 ) 0x0149e8d4 0.0000042 708 4:55:14.435 AM 4 SHELL32.dll StrCpyNW ( 0x0149eb36, "Documents and Settings", 257 ) 0x0149eb36 0.0000042 709 4:55:14.435 AM 4 SHELL32.dll StrCpyNW ( 0x0149e8d4, "Administrator", 260 ) 0x0149e8d4 0.0000042 710 4:55:14.435 AM 4 SHELL32.dll StrCpyNW ( 0x0149eb64, "Administrator", 234 ) 0x0149eb64 0.0000042 711 4:55:14.435 AM 4 SHELL32.dll StrCpyNW ( 0x0149e8d4, "Favorites", 260 ) 0x0149e8d4 0.0000047 712 4:55:14.435 AM 4 SHELL32.dll StrCpyNW ( 0x0149eb80, "Favorites", 220 ) 0x0149eb80 0.0000042 713 4:55:14.435 AM 4 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Favorites" ) 0x0016f700 0.0000053 714 4:55:14.435 AM 4 SHELL32.dll StrCpyNW ( 0x0149eaf0, "Links", 260 ) 0x0149eaf0 0.0000042 715 4:55:14.435 AM 4 SHELL32.dll StrCpyNW ( 0x0149eff8, "Links", 210 ) 0x0149eff8 0.0000042 716 4:55:14.435 AM 4 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Favorites\Links", 0x0149f1c0 ) S_OK 0.0000050 717 4:55:14.435 AM 4 SHELL32.dll StrRetToBufW ( 0x0149f1bc, 0x00f8015d, 0x0149f9a0, 260 ) S_OK 0.0000047 718 4:55:14.435 AM 4 SHELL32.dll StrCpyNW ( 0x0149eea4, "Links", 260 ) 0x0149eea4 0.0000042 719 4:55:14.435 AM 4 SHELL32.dll PathFindExtensionW ( "Links" ) 0x0149eeae 0.0000042 720 4:55:14.435 AM 4 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 721 4:55:14.435 AM 4 SHELL32.dll StrCpyNW ( 0x0149f798, "C:\Documents and Settings\Administrator\Favorites\Links", 260 ) 0x0149f798 0.0000045 722 4:55:14.435 AM 4 SHELL32.dll PathStripToRootW ( "C:\Documents and Settings\Administrator\Favorites\Links" ) TRUE 0.0000064 723 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f310 ) S_OK 0.0000045 724 4:55:14.435 AM 4 SHELL32.dll SHUnicodeToUnicode ( "C:\Documents and Settings\Administrator\Favorites\Links", 0x0149f318, 260 ) 56 0.0000067 725 4:55:14.435 AM 4 SHELL32.dll StrDupW ( "::{20D04FE0-3AEA-1069-A2D8-08002B30309D}" ) 0x02180a78 0.0000059 726 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f1b8 ) S_OK 0.0000042 727 4:55:14.435 AM 4 SHELL32.dll GUIDFromStringW ( "{20D04FE0-3AEA-1069-A2D8-08002B30309D}", IID_NULL ) TRUE 0.0000059 728 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f1f8 ) S_OK 0.0000042 729 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149f268 ) S_OK 0.0000045 730 4:55:14.435 AM 4 SHELL32.dll PathBuildRootA ( 0x0149f167, 2 ) 0x0149f167 0.0000045 731 4:55:14.435 AM 4 SHELL32.dll QISearch ( 0x0017c7e8, 0x7c8d81e0, IFileSystemBindData, 0x0149f108 ) S_OK 0.0000042 732 4:55:14.435 AM 4 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions", 0, KEY_ENUMERATE_SUB_KEYS, 0x0149f09c ) ERROR_SUCCESS 0.0000251 733 4:55:14.435 AM 4 SHELL32.dll SHGetValueW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", "DriveMask", NULL, 0x0149ee64, 0x0149ee60 ) ERROR_SUCCESS 0.0009683 734 4:55:14.445 AM 4 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", 0, KEY_QUERY_VALUE, 0x0149ed20 ) ERROR_SUCCESS 0.0000254 735 4:55:14.445 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x0000057a, "DriveMask", NULL, 0x0149ed08, 0x0149ee64, 0x0149ee60 ) ERROR_SUCCESS 0.0000413 736 4:55:14.445 AM 4 SHLWAPI.dll RegCloseKey ( 0x0000057a ) ERROR_SUCCESS 0.0000067 737 4:55:14.445 AM 4 SHELL32.dll PathBuildRootW ( 0x0149f070, 2 ) 0x0149f070 0.0000045 738 4:55:14.445 AM 4 SHELL32.dll RegCloseKey ( 0x0000079e ) ERROR_SUCCESS 0.0000056 739 4:55:14.445 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149eca0, 260 ) 4 0.0000047 740 4:55:14.445 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215fab0 0.0000045 741 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0149f160 ) S_OK 0.0000042 742 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x0017c7e8, 0x7c8d81e0, IFileSystemBindData, 0x0149f10c ) S_OK 0.0000045 743 4:55:14.445 AM 4 SHELL32.dll StrChrW ( "Documents and Settings\Administrator\Favorites\Links", '\' ) 0x0149f34a 0.0000045 744 4:55:14.445 AM 4 SHELL32.dll StrCpyW ( "", "Documents and Settings" ) 0x0219f18a 0.0000045 745 4:55:14.445 AM 4 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x0149ef04 0.0000045 746 4:55:14.445 AM 4 SHELL32.dll StrChrW ( "Administrator\Favorites\Links", '\' ) 0x0149f366 0.0000045 747 4:55:14.445 AM 4 SHELL32.dll StrCpyW ( "", "Administrator" ) 0x0215da48 0.0000045 748 4:55:14.445 AM 4 SHELL32.dll PathFindExtensionW ( "Administrator" ) 0x0149eef2 0.0000045 749 4:55:14.445 AM 4 SHELL32.dll StrChrW ( "Favorites\Links", '\' ) 0x0149f37a 0.0000042 750 4:55:14.445 AM 4 SHELL32.dll StrCpyW ( "", "Favorites" ) 0x00170cac 0.0000042 751 4:55:14.445 AM 4 SHELL32.dll PathFindExtensionW ( "Favorites" ) 0x0149eeea 0.0000042 752 4:55:14.445 AM 4 SHELL32.dll StrChrW ( "Links", '\' ) NULL 0.0000042 753 4:55:14.445 AM 4 SHELL32.dll SHUnicodeToUnicode ( "Links", 0x0149eed8, 260 ) 6 0.0000042 754 4:55:14.445 AM 4 SHELL32.dll StrCpyNW ( 0x0149f0e0, "", 14 ) 0x0149f0e0 0.0000042 755 4:55:14.445 AM 4 SHELL32.dll StrCpyW ( "", "Links" ) 0x0215ee88 0.0000042 756 4:55:14.445 AM 4 SHELL32.dll PathFindExtensionW ( "Links" ) 0x0149eee2 0.0000042 757 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fafc ) S_OK 0.0000042 758 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fad0 ) S_OK 0.0000042 759 4:55:14.445 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 760 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000ccd70, 0x7c8d7268, IShellFolder2, 0x0149fa58 ) S_OK 0.0000070 761 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 762 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000ccc98, 0x7c8d7268, IShellFolder2, 0x0149fa4c ) S_OK 0.0000045 763 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 764 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa30 ) S_OK 0.0000042 765 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Favorites" ) 6 0.0000042 766 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa30 ) S_OK 0.0000042 767 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "Desktop", "Favorites" ) -2 0.0000042 768 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa30 ) S_OK 0.0000042 769 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "Start Menu", "Favorites" ) 13 0.0000042 770 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa30 ) S_OK 0.0000045 771 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "Favorites" ) -5 0.0000042 772 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa30 ) S_OK 0.0000042 773 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "PrintHood", "Favorites" ) 10 0.0000039 774 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa30 ) S_OK 0.0000045 775 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "NetHood", "Favorites" ) 8 0.0000042 776 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb04 ) S_OK 0.0000045 777 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fad8 ) S_OK 0.0000045 778 4:55:14.445 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 779 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000ccd70, 0x7c8d7268, IShellFolder2, 0x0149fa60 ) S_OK 0.0000045 780 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 781 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000ccc98, 0x7c8d7268, IShellFolder2, 0x0149fa54 ) S_OK 0.0000053 782 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 783 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa38 ) S_OK 0.0000045 784 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Favorites" ) 6 0.0000042 785 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa38 ) S_OK 0.0000042 786 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "Desktop", "Favorites" ) -2 0.0000042 787 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa38 ) S_OK 0.0000042 788 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "Start Menu", "Favorites" ) 13 0.0000042 789 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa38 ) S_OK 0.0000042 790 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "Favorites" ) -5 0.0000042 791 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa38 ) S_OK 0.0000042 792 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "PrintHood", "Favorites" ) 10 0.0000042 793 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa38 ) S_OK 0.0000042 794 4:55:14.445 AM 4 SHELL32.dll StrCmpICW ( "NetHood", "Favorites" ) 8 0.0000039 795 4:55:14.445 AM 4 SHELL32.dll PathFindExtensionW ( "Favorites" ) 0x00170bce 0.0000042 796 4:55:14.445 AM 4 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 797 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder, 0x0011f5bc ) S_OK 0.0000045 798 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IPersistFolder3, 0x0149f3b0 ) S_OK 0.0000045 799 4:55:14.445 AM 4 SHELL32.dll StrCpyNW ( 0x0149f414, "Favorites", 220 ) 0x0149f414 0.0000042 800 4:55:14.445 AM 4 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Favorites" ) 0x0016f700 0.0000053 801 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb3c ) S_OK 0.0000042 802 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb10 ) S_OK 0.0000045 803 4:55:14.445 AM 4 SHELL32.dll StrCmpICA ( "Z:\", "C:\" ) 23 0.0000059 804 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb10 ) S_OK 0.0000061 805 4:55:14.445 AM 4 SHELL32.dll SHUnlockShared ( 0x00f80010 ) TRUE 0.0000131 806 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f928 ) S_OK 0.0000064 807 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149f8f0 ) S_OK 0.0000064 808 4:55:14.445 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149f3fc, 260 ) 4 0.0000078 809 4:55:14.445 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215fab0 0.0000078 810 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0149f8a0 ) S_OK 0.0000050 811 4:55:14.445 AM 4 SHELL32.dll StrCpyNW ( 0x0149f3d8, "Favorites", 260 ) 0x0149f3d8 0.0000045 812 4:55:14.445 AM 4 SHELL32.dll PathFindExtensionW ( "Favorites" ) 0x0149f3ea 0.0000411 813 4:55:14.445 AM 4 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000045 814 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x0149f990 ) S_OK 0.0000045 815 4:55:14.445 AM 4 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IPersistFolder3, 0x0149f1b4 ) S_OK 0.0000047 816 4:55:14.445 AM 4 SHELL32.dll StrCpyNW ( 0x0149ef6c, "Documents and Settings", 260 ) 0x0149ef6c 0.0000045 817 4:55:14.445 AM 4 SHELL32.dll StrCpyNW ( 0x0149f1ce, "Documents and Settings", 257 ) 0x0149f1ce 0.0000045 818 4:55:14.445 AM 4 SHELL32.dll StrCpyNW ( 0x0149ef6c, "Administrator", 260 ) 0x0149ef6c 0.0000042 819 4:55:14.445 AM 4 SHELL32.dll StrCpyNW ( 0x0149f1fc, "Administrator", 234 ) 0x0149f1fc 0.0000042 820 4:55:14.445 AM 4 SHELL32.dll StrCpyNW ( 0x0149ef6c, "Favorites", 260 ) 0x0149ef6c 0.0000042 821 4:55:14.445 AM 4 SHELL32.dll StrCpyNW ( 0x0149f218, "Favorites", 220 ) 0x0149f218 0.0000042 822 4:55:14.445 AM 4 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Favorites" ) 0x0016f7e0 0.0000053 823 4:55:14.445 AM 4 SHELL32.dll StrCpyNW ( 0x0149f188, "Links", 260 ) 0x0149f188 0.0000042 824 4:55:14.445 AM 4 SHELL32.dll StrCpyNW ( 0x0149f690, "Links", 210 ) 0x0149f690 0.0000042 825 4:55:14.445 AM 4 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Favorites\Links", 0x0149f858 ) S_OK 0.0000201 826 4:55:14.445 AM 4 SHELL32.dll StrRetToBufW ( 0x0149f854, 0x0219e637, 0x0149fc10, 260 ) S_OK 0.0000047 827 4:55:14.445 AM 4 SHELL32.dll StrCpyNW ( 0x0149f53c, "Links", 260 ) 0x0149f53c 0.0000042 828 4:55:14.445 AM 4 SHELL32.dll PathFindExtensionW ( "Links" ) 0x0149f546 0.0000042 829 4:55:14.445 AM 4 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000039 830 4:55:14.445 AM 4 SHELL32.dll PathGetDriveNumberW ( "C:\Documents and Settings\Administrator\Favorites\Links" ) 2 0.0000042 831 4:55:14.445 AM 4 SHELL32.dll PathBuildRootW ( 0x0149fbac, 2 ) 0x0149fbac 0.0000042 832 4:55:14.465 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000050 833 4:55:14.465 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000070 834 4:55:14.475 AM 1 SHELL32.dll PathFindExtensionW ( "https://google.com/" ) 0x027719b0 0.0000059 835 4:55:14.475 AM 1 SHELL32.dll StrCmpICW ( ".com/", ".exe" ) -2 0.0000045 836 4:55:14.475 AM 1 SHELL32.dll PathFindExtensionW ( "C:\Program Files\Internet Explorer\IEXPLORE.EXE" ) 0x02774ed2 0.0000084 837 4:55:14.475 AM 1 SHELL32.dll StrCmpCW ( ".com/", ".EXE" ) 30 0.0000067 838 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecac ) ERROR_SUCCESS 0.0000156 839 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000101 840 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000140 841 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 842 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}", 0, KEY_READ, 0x00f2ecac ) ERROR_SUCCESS 0.0000137 843 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000578, 0, 0x00f2ee00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000067 844 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000578, 1, 0x00f2ee00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 845 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000578, 2, 0x00f2ee00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 846 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000578, 3, 0x00f2ee00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 847 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000578, 4, 0x00f2ee00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 848 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000578, 5, 0x00f2ee00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 849 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000578, 6, 0x00f2ee00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000056 850 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000578 ) ERROR_SUCCESS 0.0000061 851 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 2, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 852 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000131 853 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 3, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 854 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000112 855 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 4, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 856 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000117 857 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 5, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000056 858 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000056 859 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000109 860 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 861 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{246ECB87-C2F2-4ABE-905B-C8B38ADD2C43}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000134 862 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000070 863 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{246ECB87-C2F2-4ABE-905B-C8B38ADD2C43}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000129 864 4:55:14.485 AM 2 MSCTF.dll RegQueryValueExA ( 0x00000578, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000067 865 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000578 ) ERROR_SUCCESS 0.0000059 866 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000053 867 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecac ) ERROR_SUCCESS 0.0000109 868 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 869 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Category\{246ECB87-C2F2-4ABE-905B-C8B38ADD2C43}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 870 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 871 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{246ECB87-C2F2-4ABE-905B-C8B38ADD2C43}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000115 872 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 2, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 873 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{246ECB87-C2F2-4ABE-905B-C8B38ADD2C43}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000115 874 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 3, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 875 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{246ECB87-C2F2-4ABE-905B-C8B38ADD2C43}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 876 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 4, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 877 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{246ECB87-C2F2-4ABE-905B-C8B38ADD2C43}", 0, KEY_READ, 0x00f2ecac ) ERROR_SUCCESS 0.0000131 878 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000578, 0, 0x00f2ee00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000067 879 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000578, 1, 0x00f2ee00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000056 880 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000578 ) ERROR_SUCCESS 0.0000056 881 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 5, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000056 882 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000053 883 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000106 884 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 885 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{34745C63-B2F0-4784-8B67-5E12C8701A31}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 886 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 887 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{34745C63-B2F0-4784-8B67-5E12C8701A31}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000120 888 4:55:14.485 AM 2 MSCTF.dll RegQueryValueExA ( 0x00000578, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000059 889 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000578 ) ERROR_SUCCESS 0.0000056 890 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000053 891 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecac ) ERROR_SUCCESS 0.0000106 892 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 893 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Category\{34745C63-B2F0-4784-8B67-5E12C8701A31}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000123 894 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000070 895 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{34745C63-B2F0-4784-8B67-5E12C8701A31}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000112 896 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 2, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 897 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{34745C63-B2F0-4784-8B67-5E12C8701A31}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000117 898 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 3, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 899 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{34745C63-B2F0-4784-8B67-5E12C8701A31}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 900 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 4, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 901 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{34745C63-B2F0-4784-8B67-5E12C8701A31}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000112 902 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 5, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000056 903 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000059 904 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000106 905 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 906 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{5130A009-5540-4FCF-97EB-AAD33FC0EE09}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000101 907 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 908 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{5130A009-5540-4FCF-97EB-AAD33FC0EE09}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000123 909 4:55:14.485 AM 2 MSCTF.dll RegQueryValueExA ( 0x00000578, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000061 910 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000578 ) ERROR_SUCCESS 0.0000056 911 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000053 912 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecac ) ERROR_SUCCESS 0.0000103 913 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 914 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Category\{5130A009-5540-4FCF-97EB-AAD33FC0EE09}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 915 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 916 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{5130A009-5540-4FCF-97EB-AAD33FC0EE09}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 917 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 2, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 918 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{5130A009-5540-4FCF-97EB-AAD33FC0EE09}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000117 919 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 3, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 920 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{5130A009-5540-4FCF-97EB-AAD33FC0EE09}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 921 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 4, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 922 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{5130A009-5540-4FCF-97EB-AAD33FC0EE09}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000106 923 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 5, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000053 924 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000053 925 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000129 926 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000070 927 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{7AE86BB7-262C-431E-9111-C974B6B7CAC3}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000106 928 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 929 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{7AE86BB7-262C-431E-9111-C974B6B7CAC3}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000134 930 4:55:14.485 AM 2 MSCTF.dll RegQueryValueExA ( 0x00000578, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000059 931 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000578 ) ERROR_SUCCESS 0.0000059 932 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000053 933 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecac ) ERROR_SUCCESS 0.0000101 934 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 935 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Category\{7AE86BB7-262C-431E-9111-C974B6B7CAC3}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 936 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 937 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{7AE86BB7-262C-431E-9111-C974B6B7CAC3}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000106 938 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 2, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 939 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{7AE86BB7-262C-431E-9111-C974B6B7CAC3}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000115 940 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 3, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 941 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{7AE86BB7-262C-431E-9111-C974B6B7CAC3}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000112 942 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 4, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 943 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{7AE86BB7-262C-431E-9111-C974B6B7CAC3}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 944 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 5, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000056 945 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000053 946 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000103 947 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 948 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{B5A73CD1-8355-426B-A161-259808F26B14}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 949 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 950 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{B5A73CD1-8355-426B-A161-259808F26B14}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000123 951 4:55:14.485 AM 2 MSCTF.dll RegQueryValueExA ( 0x00000578, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000059 952 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000578 ) ERROR_SUCCESS 0.0000056 953 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000053 954 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecac ) ERROR_SUCCESS 0.0000106 955 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 956 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Category\{B5A73CD1-8355-426B-A161-259808F26B14}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000467 957 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000070 958 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{B5A73CD1-8355-426B-A161-259808F26B14}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 959 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 2, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 960 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{B5A73CD1-8355-426B-A161-259808F26B14}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000115 961 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 3, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 962 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{B5A73CD1-8355-426B-A161-259808F26B14}", 0, KEY_READ, 0x00f2ecac ) ERROR_SUCCESS 0.0000126 963 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000578, 0, 0x00f2ee00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 964 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000578, 1, 0x00f2ee00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000053 965 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000578 ) ERROR_SUCCESS 0.0000056 966 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 4, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 967 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{B5A73CD1-8355-426B-A161-259808F26B14}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 968 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 5, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000056 969 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000053 970 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000109 971 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 972 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000101 973 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 974 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000123 975 4:55:14.485 AM 2 MSCTF.dll RegQueryValueExA ( 0x00000578, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000061 976 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000578 ) ERROR_SUCCESS 0.0000053 977 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000053 978 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecac ) ERROR_SUCCESS 0.0000103 979 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 0, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 980 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Category\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 981 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 1, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 982 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 983 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 2, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 984 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000115 985 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 3, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000061 986 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 987 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 4, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 988 4:55:14.485 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000574, "{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04}", 0, KEY_READ, 0x00f2ecac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000352 989 4:55:14.485 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000574, 5, 0x00f2ed00, 0x00f2ecc0, NULL, NULL, NULL, NULL ) ERROR_NO_MORE_ITEMS 259 = No more data is available. 0.0000067 990 4:55:14.485 AM 2 MSCTF.dll RegCloseKey ( 0x00000574 ) ERROR_SUCCESS 0.0000059 991 4:55:14.505 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fc64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000056 992 4:55:14.505 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 993 4:55:14.505 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) S_OK 0.0000047 994 4:55:14.505 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000087 995 4:55:14.505 AM 1 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000059 996 4:55:14.505 AM 1 ieframe.dll RegCloseKey ( 0x000001ea ) ERROR_SUCCESS 0.0000059 997 4:55:14.505 AM 1 SHELL32.dll PathFindExtensionW ( "https://google.com" ) 0x02759d50 0.0000047 998 4:55:14.505 AM 1 SHELL32.dll StrCmpICW ( ".com", ".exe" ) -2 0.0000042 999 4:55:14.505 AM 1 SHELL32.dll PathFindExtensionW ( "" ) 0x0275d21c 0.0000042 1000 4:55:14.505 AM 1 SHELL32.dll StrCmpCW ( ".com", "" ) 46 0.0000042 1001 4:55:14.505 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fc64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000047 1002 4:55:14.505 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1003 4:55:14.505 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fc48 ) S_OK 0.0000042 1004 4:55:14.505 AM 1 SHELL32.dll StrCatBuffW ( "https://google.com", "\1", 262 ) 0x01dbeec0 0.0000053 1005 4:55:14.505 AM 1 comctl32.dll RegSetValueExW ( 0x000003d4, "c", 0, REG_SZ, 0x01dbeec0, 42 ) ERROR_KEY_DELETED 1018 = Illegal operation attempted on a registry key that has been marked for deletion. 0.0000084 1006 4:55:14.505 AM 1 comctl32.dll RegSetValueExW ( 0x000003d4, "MRUList", 0, REG_SZ, 0x0215e560, 8 ) ERROR_KEY_DELETED 1018 = Illegal operation attempted on a registry key that has been marked for deletion. 0.0000059 1007 4:55:14.505 AM 1 comctl32.dll RegCloseKey ( 0x00000764 ) ERROR_SUCCESS 0.0000067 1008 4:55:14.505 AM 1 BROWSEUI.dll RegCloseKey ( 0x0000056c ) ERROR_SUCCESS 0.0000059 1009 4:55:14.755 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fafc ) S_OK 0.0000050 1010 4:55:14.755 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fad0 ) S_OK 0.0000045 1011 4:55:14.755 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000045 1012 4:55:14.755 AM 4 SHELL32.dll QISearch ( 0x000ccd70, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000042 1013 4:55:14.755 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0014063 1014 4:55:14.766 AM 4 SHELL32.dll QISearch ( 0x000ccc98, 0x7c8d7268, IShellFolder2, 0x0149fa50 ) S_OK 0.0000042 1015 4:55:14.766 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 1016 4:55:14.766 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa34 ) S_OK 0.0000045 1017 4:55:14.766 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Desktop" ) 2 0.0000042 1018 4:55:14.766 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa34 ) S_OK 0.0000053 1019 4:55:14.766 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Desktop" ) 8 0.0000045 1020 4:55:14.766 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa34 ) S_OK 0.0000042 1021 4:55:14.766 AM 4 SHELL32.dll StrCmpICW ( "Desktop", "Desktop" ) 0 0.0000042 1022 4:55:14.766 AM 4 SHELL32.dll SHUnlockShared ( 0x02690010 ) TRUE 0.0000078 1023 4:55:14.846 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007f030 ) ERROR_SUCCESS 0.0000126 1024 4:55:14.846 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x0000056c, "REGDBVersion", NULL, NULL, 0x0007f0ac, 0x0007f02c ) ERROR_SUCCESS 0.0000061 1025 4:55:14.846 AM 3 CLBCatQ.DLL RegCloseKey ( 0x0000056c ) ERROR_SUCCESS 0.0000056 1026 4:55:14.846 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007f0d8 ) ERROR_SUCCESS 0.0000101 1027 4:55:14.846 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x0000056c, "REGDBVersion", NULL, NULL, 0x0007f154, 0x0007f0d4 ) ERROR_SUCCESS 0.0000056 1028 4:55:14.846 AM 3 CLBCatQ.DLL RegCloseKey ( 0x0000056c ) ERROR_SUCCESS 0.0000056 1029 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{9BA05972-F6A8-11CF-A442-00A0C90A8F39}", 0, KEY_READ, 0x0007f2d4 ) ERROR_SUCCESS 0.0000190 1030 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218a5d0 ) ERROR_SUCCESS 0.0000115 1031 4:55:14.846 AM 3 ole32.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000056 1032 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x00000766, "CLSID\{9BA05972-F6A8-11CF-A442-00A0C90A8F39}", 0, KEY_READ, 0x0007f3a0 ) ERROR_SUCCESS 0.0000168 1033 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x0000056e, "InprocServer32", 0, KEY_READ, 0x0007f33c ) ERROR_SUCCESS 0.0000218 1034 4:55:14.846 AM 3 ole32.dll RegQueryValueExW ( 0x0000077a, "InprocServer32", NULL, 0x0007f348, 0x02194ca0, 0x0007f330 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 1035 4:55:14.846 AM 3 ole32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000056 1036 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x0000056e, "LocalServer32", 0, KEY_READ, 0x0007f35c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000215 1037 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x0000056e, "InprocServer32", 0, KEY_READ, 0x0007f35c ) ERROR_SUCCESS 0.0000207 1038 4:55:14.846 AM 3 ole32.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x0007f368, 0x02194ca0, 0x0007f350 ) ERROR_SUCCESS 0.0000182 1039 4:55:14.846 AM 3 ole32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000056 1040 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x0000056e, "InprocHandler32", 0, KEY_READ, 0x0007f35c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 1041 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x0000056e, "LocalServer32", 0, KEY_READ, 0x0007f35c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 1042 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x0000056e, "LocalServer", 0, KEY_READ, 0x0007f35c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 1043 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x00000766, "CLSID\{9BA05972-F6A8-11CF-A442-00A0C90A8F39}", 0, KEY_READ, 0x0007f300 ) ERROR_SUCCESS 0.0000173 1044 4:55:14.846 AM 3 ole32.dll RegQueryValueExW ( 0x0000077a, "AppID", NULL, 0x0007f2d4, 0x0007f304, 0x0007f2c4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 1045 4:55:14.846 AM 3 ole32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000056 1046 4:55:14.846 AM 3 ole32.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000053 1047 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0007f5a8 ) S_OK 0.0000045 1048 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IMarshal, 0x0007f39c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1049 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, {0000001b-0000-0000-c000-000000000046}, 0x0007f37c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1050 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IUnknown, 0x0007f330 ) S_OK 0.0000045 1051 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IStdMarshalInfo, 0x0007f290 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1052 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IExternalConnection, 0x0218a1e8 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1053 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, {4c1e39e1-e3e3-4296-aa86-ec938d896e92}, 0x0007f298 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1054 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0007f1d4 ) S_OK 0.0000042 1055 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0011f5e0 ) S_OK 0.0000042 1056 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0007f1dc ) S_OK 0.0000042 1057 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, ICallFactory, 0x0007fa70 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1058 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IShellWindows, 0x0218d298 ) S_OK 0.0000045 1059 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IMarshal, 0x0007f53c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1060 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IMarshal, 0x0007f508 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1061 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, {0000001b-0000-0000-c000-000000000046}, 0x0007f4e8 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1062 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IUnknown, 0x0007f49c ) S_OK 0.0000045 1063 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IStdMarshalInfo, 0x0007f3fc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1064 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IExternalConnection, 0x02189f30 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1065 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, {4c1e39e1-e3e3-4296-aa86-ec938d896e92}, 0x0007f404 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1066 4:55:14.846 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IShellWindows, 0x0007f340 ) S_OK 0.0000045 1067 4:55:14.846 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007ed00 ) ERROR_SUCCESS 0.0000117 1068 4:55:14.846 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000284, "REGDBVersion", NULL, NULL, 0x0007ed7c, 0x0007ecfc ) ERROR_SUCCESS 0.0000061 1069 4:55:14.846 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1070 4:55:14.846 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007eda8 ) ERROR_SUCCESS 0.0000101 1071 4:55:14.846 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000284, "REGDBVersion", NULL, NULL, 0x0007ee24, 0x0007eda4 ) ERROR_SUCCESS 0.0000073 1072 4:55:14.846 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000059 1073 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007efa4 ) ERROR_SUCCESS 0.0000204 1074 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218aa58 ) ERROR_SUCCESS 0.0000120 1075 4:55:14.846 AM 3 ole32.dll RegCloseKey ( 0x00000286 ) ERROR_SUCCESS 0.0000056 1076 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f070 ) ERROR_SUCCESS 0.0000374 1077 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x00000286, "InprocServer32", 0, KEY_READ, 0x0007f00c ) ERROR_SUCCESS 0.0000313 1078 4:55:14.846 AM 3 ole32.dll RegQueryValueExW ( 0x00000196, "InprocServer32", NULL, 0x0007f018, 0x02194ca0, 0x0007f000 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000251 1079 4:55:14.846 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000078 1080 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x00000286, "LocalServer32", 0, KEY_READ, 0x0007f02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000277 1081 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x00000286, "InprocServer32", 0, KEY_READ, 0x0007f02c ) ERROR_SUCCESS 0.0000358 1082 4:55:14.846 AM 3 ole32.dll RegQueryValueExW ( 0x00000196, NULL, NULL, 0x0007f038, 0x02194ca0, 0x0007f020 ) ERROR_SUCCESS 0.0000226 1083 4:55:14.846 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000073 1084 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x00000286, "InprocHandler32", 0, KEY_READ, 0x0007f02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000291 1085 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x00000286, "LocalServer32", 0, KEY_READ, 0x0007f02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000246 1086 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x00000286, "LocalServer", 0, KEY_READ, 0x0007f02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000271 1087 4:55:14.846 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007efd0 ) ERROR_SUCCESS 0.0000246 1088 4:55:14.846 AM 3 ole32.dll RegQueryValueExW ( 0x00000196, "AppID", NULL, 0x0007efa4, 0x0007efd4, 0x0007ef94 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000324 1089 4:55:14.846 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000073 1090 4:55:14.846 AM 3 ole32.dll RegCloseKey ( 0x00000286 ) ERROR_SUCCESS 0.0000070 1091 4:55:14.856 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0007f558 ) S_OK 0.0000061 1092 4:55:14.856 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, ICallFactory, 0x0007fa70 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000056 1093 4:55:14.856 AM 3 OLEAUT32.dll RegQueryValueExA ( 0x00000286, "Version", NULL, NULL, 0x0007f674, 0x0007f630 ) ERROR_SUCCESS 0.0000461 1094 4:55:14.856 AM 3 OLEAUT32.dll RegCloseKey ( 0x00000286 ) ERROR_SUCCESS 0.0000073 1095 4:55:14.856 AM 3 OLEAUT32.dll RegCloseKey ( 0x0000078a ) ERROR_SUCCESS 0.0000078 1096 4:55:14.856 AM 3 OLEAUT32.dll RegCloseKey ( 0x0000078e ) ERROR_SUCCESS 0.0000070 1097 4:55:14.856 AM 3 OLEAUT32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000073 1098 4:55:14.856 AM 3 OLEAUT32.dll RegCloseKey ( 0x00000286 ) ERROR_SUCCESS 0.0000067 1099 4:55:14.856 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IShellWindows, 0x0015dcd0 ) S_OK 0.0000053 1100 4:55:14.856 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007f3f8 ) ERROR_SUCCESS 0.0000148 1101 4:55:14.856 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000284, "REGDBVersion", NULL, NULL, 0x0007f474, 0x0007f3f4 ) ERROR_SUCCESS 0.0000087 1102 4:55:14.856 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000070 1103 4:55:14.856 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007f4a0 ) ERROR_SUCCESS 0.0000126 1104 4:55:14.856 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000284, "REGDBVersion", NULL, NULL, 0x0007f51c, 0x0007f49c ) ERROR_SUCCESS 0.0000073 1105 4:55:14.856 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000070 1106 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f69c ) ERROR_SUCCESS 0.0000344 1107 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218a148 ) ERROR_SUCCESS 0.0000151 1108 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x00000286 ) ERROR_SUCCESS 0.0000070 1109 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000196, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f768 ) ERROR_SUCCESS 0.0000212 1110 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000286, "InprocServer32", 0, KEY_READ, 0x0007f704 ) ERROR_SUCCESS 0.0000271 1111 4:55:14.856 AM 3 ole32.dll RegQueryValueExW ( 0x0000078e, "InprocServer32", NULL, 0x0007f710, 0x02194ca0, 0x0007f6f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000235 1112 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x0000078e ) ERROR_SUCCESS 0.0000073 1113 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000286, "LocalServer32", 0, KEY_READ, 0x0007f724 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000249 1114 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000286, "InprocServer32", 0, KEY_READ, 0x0007f724 ) ERROR_SUCCESS 0.0000263 1115 4:55:14.856 AM 3 ole32.dll RegQueryValueExW ( 0x0000078e, NULL, NULL, 0x0007f730, 0x02194ca0, 0x0007f718 ) ERROR_SUCCESS 0.0000226 1116 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x0000078e ) ERROR_SUCCESS 0.0000073 1117 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000286, "InprocHandler32", 0, KEY_READ, 0x0007f724 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000249 1118 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000286, "LocalServer32", 0, KEY_READ, 0x0007f724 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000237 1119 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000286, "LocalServer", 0, KEY_READ, 0x0007f724 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000327 1120 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000196, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f6c8 ) ERROR_SUCCESS 0.0000226 1121 4:55:14.856 AM 3 ole32.dll RegQueryValueExW ( 0x0000078e, "AppID", NULL, 0x0007f69c, 0x0007f6cc, 0x0007f68c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000223 1122 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x0000078e ) ERROR_SUCCESS 0.0000070 1123 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x00000286 ) ERROR_SUCCESS 0.0000070 1124 4:55:14.856 AM 3 ole32.dll RegNotifyChangeKeyValue ( 0x000000e8, TRUE, REG_NOTIFY_CHANGE_LAST_SET | REG_NOTIFY_CHANGE_NAME, 0x000000ec, TRUE ) ERROR_SUCCESS 0.0000126 1125 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000075 1126 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x00000772 ) ERROR_SUCCESS 0.0000075 1127 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x00000766 ) ERROR_SUCCESS 0.0000075 1128 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000070 1129 4:55:14.856 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007edc4 ) ERROR_SUCCESS 0.0000131 1130 4:55:14.856 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000754, "REGDBVersion", NULL, NULL, 0x0007ee40, 0x0007edc0 ) ERROR_SUCCESS 0.0000078 1131 4:55:14.856 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000067 1132 4:55:14.856 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007ee6c ) ERROR_SUCCESS 0.0000126 1133 4:55:14.856 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000754, "REGDBVersion", NULL, NULL, 0x0007eee8, 0x0007ee68 ) ERROR_SUCCESS 0.0000073 1134 4:55:14.856 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000070 1135 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f068 ) ERROR_SUCCESS 0.0000411 1136 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218aa58 ) ERROR_SUCCESS 0.0000148 1137 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000070 1138 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000766, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f134 ) ERROR_SUCCESS 0.0000210 1139 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "InprocServer32", 0, KEY_READ, 0x0007f0d0 ) ERROR_SUCCESS 0.0000296 1140 4:55:14.856 AM 3 ole32.dll RegQueryValueExW ( 0x00000772, "InprocServer32", NULL, 0x0007f0dc, 0x02194ca0, 0x0007f0c4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000229 1141 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x00000772 ) ERROR_SUCCESS 0.0000070 1142 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "LocalServer32", 0, KEY_READ, 0x0007f0f0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000237 1143 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "InprocServer32", 0, KEY_READ, 0x0007f0f0 ) ERROR_SUCCESS 0.0000254 1144 4:55:14.856 AM 3 ole32.dll RegQueryValueExW ( 0x00000772, NULL, NULL, 0x0007f0fc, 0x02194ca0, 0x0007f0e4 ) ERROR_SUCCESS 0.0000226 1145 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x00000772 ) ERROR_SUCCESS 0.0000070 1146 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "InprocHandler32", 0, KEY_READ, 0x0007f0f0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000243 1147 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "LocalServer32", 0, KEY_READ, 0x0007f0f0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000235 1148 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "LocalServer", 0, KEY_READ, 0x0007f0f0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000237 1149 4:55:14.856 AM 3 ole32.dll RegOpenKeyExW ( 0x00000766, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f094 ) ERROR_SUCCESS 0.0000307 1150 4:55:14.856 AM 3 ole32.dll RegQueryValueExW ( 0x00000772, "AppID", NULL, 0x0007f068, 0x0007f098, 0x0007f058 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000221 1151 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x00000772 ) ERROR_SUCCESS 0.0000073 1152 4:55:14.856 AM 3 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000070 1153 4:55:14.866 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000064 1154 4:55:15.026 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000050 1155 4:55:15.026 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000047 1156 4:55:15.026 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f704 ) S_OK 0.0001137 1157 4:55:15.026 AM 2 SHELL32.dll QISearch ( 0x001707d0, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000045 1158 4:55:15.026 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000059 1159 4:55:15.026 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x0015e73c ) ERROR_SUCCESS 0.0000316 1160 4:55:15.026 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x00000756, NULL, 0, MAXIMUM_ALLOWED, 0x00f2f544 ) ERROR_SUCCESS 0.0000274 1161 4:55:15.026 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000067 1162 4:55:15.026 AM 2 Explorer.EXE RegOpenKeyExW ( 0x00000772, "TaskbarExceptionsIcons", 0, KEY_READ, 0x00f2f71c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000215 1163 4:55:15.026 AM 2 Explorer.EXE RegCloseKey ( 0x00000772 ) ERROR_SUCCESS 0.0000056 1164 4:55:15.066 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb44 ) S_OK 0.0000050 1165 4:55:15.066 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb18 ) S_OK 0.0000045 1166 4:55:15.066 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000056 1167 4:55:15.066 AM 4 SHELL32.dll QISearch ( 0x000c1cb0, 0x7c8d7268, IShellFolder2, 0x0149faac ) S_OK 0.0000045 1168 4:55:15.066 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 1169 4:55:15.066 AM 4 SHELL32.dll QISearch ( 0x000c6fd0, 0x7c8d7268, IShellFolder2, 0x0149fa98 ) S_OK 0.0000045 1170 4:55:15.066 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000045 1171 4:55:15.066 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa64 ) S_OK 0.0000045 1172 4:55:15.066 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Favorites" ) 0 0.0000042 1173 4:55:15.066 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb3c ) S_OK 0.0000042 1174 4:55:15.066 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb10 ) S_OK 0.0000042 1175 4:55:15.066 AM 4 SHELL32.dll StrCmpICA ( "Z:\", "C:\" ) 23 0.0000042 1176 4:55:15.066 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb10 ) S_OK 0.0000042 1177 4:55:15.066 AM 4 SHELL32.dll SHUnlockShared ( 0x02690010 ) TRUE 0.0000078 1178 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000140 1179 4:55:15.116 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000770, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000089 1180 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000770, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{246ECB87-C2F2-4ABE-905B-C8B38ADD2C43}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000126 1181 4:55:15.116 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000770, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000064 1182 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000770, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{246ECB87-C2F2-4ABE-905B-C8B38ADD2C43}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000126 1183 4:55:15.116 AM 2 MSCTF.dll RegQueryValueExA ( 0x00000754, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000064 1184 4:55:15.116 AM 2 MSCTF.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000084 1185 4:55:15.116 AM 2 MSCTF.dll RegCloseKey ( 0x00000770 ) ERROR_SUCCESS 0.0000081 1186 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000165 1187 4:55:15.116 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000770, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000092 1188 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000770, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{34745C63-B2F0-4784-8B67-5E12C8701A31}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 1189 4:55:15.116 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000770, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000087 1190 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000770, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{34745C63-B2F0-4784-8B67-5E12C8701A31}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000165 1191 4:55:15.116 AM 2 MSCTF.dll RegQueryValueExA ( 0x00000754, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000087 1192 4:55:15.116 AM 2 MSCTF.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000073 1193 4:55:15.116 AM 2 MSCTF.dll RegCloseKey ( 0x00000770 ) ERROR_SUCCESS 0.0000075 1194 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000212 1195 4:55:15.116 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000770, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000196 1196 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000770, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{5130A009-5540-4FCF-97EB-AAD33FC0EE09}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000310 1197 4:55:15.116 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000770, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000142 1198 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000770, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{5130A009-5540-4FCF-97EB-AAD33FC0EE09}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000355 1199 4:55:15.116 AM 2 MSCTF.dll RegQueryValueExA ( 0x00000754, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000151 1200 4:55:15.116 AM 2 MSCTF.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000123 1201 4:55:15.116 AM 2 MSCTF.dll RegCloseKey ( 0x00000770 ) ERROR_SUCCESS 0.0000092 1202 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000548 1203 4:55:15.116 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000770, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000131 1204 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000770, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{7AE86BB7-262C-431E-9111-C974B6B7CAC3}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000251 1205 4:55:15.116 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000770, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000103 1206 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000770, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{7AE86BB7-262C-431E-9111-C974B6B7CAC3}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000249 1207 4:55:15.116 AM 2 MSCTF.dll RegQueryValueExA ( 0x00000754, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000095 1208 4:55:15.116 AM 2 MSCTF.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000078 1209 4:55:15.116 AM 2 MSCTF.dll RegCloseKey ( 0x00000770 ) ERROR_SUCCESS 0.0000073 1210 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000159 1211 4:55:15.116 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000770, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000095 1212 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000770, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{B5A73CD1-8355-426B-A161-259808F26B14}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000151 1213 4:55:15.116 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000770, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000084 1214 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000770, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{B5A73CD1-8355-426B-A161-259808F26B14}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000176 1215 4:55:15.116 AM 2 MSCTF.dll RegQueryValueExA ( 0x00000754, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000081 1216 4:55:15.116 AM 2 MSCTF.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000073 1217 4:55:15.116 AM 2 MSCTF.dll RegCloseKey ( 0x00000770 ) ERROR_SUCCESS 0.0000070 1218 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\CTF\TIP\", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000134 1219 4:55:15.116 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000770, 0, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000087 1220 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000770, "{1188450c-fdab-47ae-80d8-c9633f71be64}\Category\Item\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04}", 0, KEY_READ, 0x00f2ecfc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000137 1221 4:55:15.116 AM 2 MSCTF.dll RegEnumKeyExA ( 0x00000770, 1, 0x00f2ed40, 0x00f2ed10, NULL, NULL, NULL, NULL ) ERROR_SUCCESS 0.0000087 1222 4:55:15.116 AM 2 MSCTF.dll RegOpenKeyExA ( 0x00000770, "{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04}", 0, KEY_READ, 0x00f2ecfc ) ERROR_SUCCESS 0.0000201 1223 4:55:15.116 AM 2 MSCTF.dll RegQueryValueExA ( 0x00000754, "Dword", NULL, 0x00f2ecfc, 0x00f2ee88, 0x00f2ed00 ) ERROR_SUCCESS 0.0000095 1224 4:55:15.116 AM 2 MSCTF.dll RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000073 1225 4:55:15.116 AM 2 MSCTF.dll RegCloseKey ( 0x00000770 ) ERROR_SUCCESS 0.0000073 1226 4:55:15.196 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000067 1227 4:55:15.196 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000056 1228 4:55:15.196 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e9fc ) S_OK 0.0000056 1229 4:55:15.196 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "C:\Program Files\Internet Explorer\IEXPLORE.EXE", NULL, 0x00f2f704 ) S_OK 0.0001347 1230 4:55:15.196 AM 2 SHELL32.dll QISearch ( 0x00170820, 0x7c92b550, IQueryAssociations, 0x00f2f5ac ) S_OK 0.0000053 1231 4:55:15.196 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f570 ) S_OK 0.0000075 1232 4:55:15.196 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\IEXPLORE.EXE", 0, MAXIMUM_ALLOWED, 0x0015e73c ) ERROR_SUCCESS 0.0000360 1233 4:55:15.196 AM 2 SHLWAPI.dll RegOpenKeyExW ( 0x000007a6, NULL, 0, MAXIMUM_ALLOWED, 0x00f2f544 ) ERROR_SUCCESS 0.0000324 1234 4:55:15.196 AM 2 SHLWAPI.dll RegCloseKey ( 0x000007a6 ) ERROR_SUCCESS 0.0000078 1235 4:55:15.196 AM 2 Explorer.EXE RegOpenKeyExW ( 0x00000796, "TaskbarExceptionsIcons", 0, KEY_READ, 0x00f2f71c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000263 1236 4:55:15.196 AM 2 Explorer.EXE RegCloseKey ( 0x00000796 ) ERROR_SUCCESS 0.0000070 1237 4:55:16.788 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2fa78 ) S_OK 0.0000067 1238 4:55:16.788 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2faec, 0x00f2fae4 ) ERROR_SUCCESS 0.0000249 1239 4:55:16.788 AM 2 Explorer.EXE RegSetValueExW ( 0x00000794, "ProgramCount", 0, REG_DWORD, 0x00f2fae8, 4 ) ERROR_SUCCESS 0.0000562 1240 4:55:16.788 AM 2 Explorer.EXE RegCloseKey ( 0x00000794 ) ERROR_SUCCESS 0.0000087 1241 4:55:16.788 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000059 1242 4:55:16.798 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000070 1243 4:55:16.808 AM 4 SHELL32.dll StrCpyNW ( 0x0149f7c0, "C:\Documents and Settings\Administrator\Desktop", 260 ) 0x0149f7c0 0.0000067 1244 4:55:16.808 AM 4 SHELL32.dll PathStripToRootW ( "C:\Documents and Settings\Administrator\Desktop" ) TRUE 0.0000081 1245 4:55:16.808 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f338 ) S_OK 0.0000061 1246 4:55:16.808 AM 4 SHELL32.dll SHUnicodeToUnicode ( "C:\Documents and Settings\Administrator\Desktop", 0x0149f340, 260 ) 48 0.0000061 1247 4:55:16.808 AM 4 SHELL32.dll StrDupW ( "::{20D04FE0-3AEA-1069-A2D8-08002B30309D}" ) 0x02180a78 0.0000070 1248 4:55:16.808 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f1e0 ) S_OK 0.0000056 1249 4:55:16.808 AM 4 SHELL32.dll GUIDFromStringW ( "{20D04FE0-3AEA-1069-A2D8-08002B30309D}", IID_NULL ) TRUE 0.0000078 1250 4:55:16.808 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f220 ) S_OK 0.0000056 1251 4:55:16.808 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149f290 ) S_OK 0.0000056 1252 4:55:16.808 AM 4 SHELL32.dll PathBuildRootA ( 0x0149f18f, 2 ) 0x0149f18f 0.0000059 1253 4:55:16.808 AM 4 SHELL32.dll QISearch ( 0x0017c580, 0x7c8d81e0, IFileSystemBindData, 0x0149f130 ) S_OK 0.0000056 1254 4:55:16.808 AM 4 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions", 0, KEY_ENUMERATE_SUB_KEYS, 0x0149f0c4 ) ERROR_SUCCESS 0.0000355 1255 4:55:16.808 AM 4 SHELL32.dll SHGetValueW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", "DriveMask", NULL, 0x0149ee8c, 0x0149ee88 ) ERROR_SUCCESS 0.0000880 1256 4:55:16.808 AM 4 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", 0, KEY_QUERY_VALUE, 0x0149ed48 ) ERROR_SUCCESS 0.0000291 1257 4:55:16.808 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x000007a6, "DriveMask", NULL, 0x0149ed30, 0x0149ee8c, 0x0149ee88 ) ERROR_SUCCESS 0.0000277 1258 4:55:16.808 AM 4 SHLWAPI.dll RegCloseKey ( 0x000007a6 ) ERROR_SUCCESS 0.0000081 1259 4:55:16.808 AM 4 SHELL32.dll PathBuildRootW ( 0x0149f098, 2 ) 0x0149f098 0.0000056 1260 4:55:16.808 AM 4 SHELL32.dll RegCloseKey ( 0x00000796 ) ERROR_SUCCESS 0.0000075 1261 4:55:16.808 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149ecc8, 260 ) 4 0.0000061 1262 4:55:16.808 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215fab0 0.0000064 1263 4:55:16.808 AM 4 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x0149f188 ) S_OK 0.0000056 1264 4:55:16.808 AM 4 SHELL32.dll QISearch ( 0x0017c580, 0x7c8d81e0, IFileSystemBindData, 0x0149f134 ) S_OK 0.0000056 1265 4:55:16.808 AM 4 SHELL32.dll StrChrW ( "Documents and Settings\Administrator\Desktop", '\' ) 0x0149f372 0.0000061 1266 4:55:16.808 AM 4 SHELL32.dll StrCpyW ( "", "Documents and Settings" ) 0x0219f18a 0.0000056 1267 4:55:16.808 AM 4 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x0149ef2c 0.0000056 1268 4:55:16.808 AM 4 SHELL32.dll StrChrW ( "Administrator\Desktop", '\' ) 0x0149f38e 0.0000053 1269 4:55:16.808 AM 4 SHELL32.dll StrCpyW ( "", "Administrator" ) 0x0215d998 0.0000056 1270 4:55:16.808 AM 4 SHELL32.dll PathFindExtensionW ( "Administrator" ) 0x0149ef1a 0.0000053 1271 4:55:16.808 AM 4 SHELL32.dll StrChrW ( "Desktop", '\' ) NULL 0.0000056 1272 4:55:16.808 AM 4 SHELL32.dll SHUnicodeToUnicode ( "Desktop", 0x0149ef00, 260 ) 8 0.0000056 1273 4:55:16.808 AM 4 SHELL32.dll StrCpyNW ( 0x0149f108, "", 14 ) 0x0149f108 0.0000056 1274 4:55:16.808 AM 4 SHELL32.dll StrCpyW ( "", "Desktop" ) 0x021bef6a 0.0000056 1275 4:55:16.808 AM 4 SHELL32.dll PathFindExtensionW ( "Desktop" ) 0x0149ef0e 0.0000056 1276 4:55:16.808 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb24 ) S_OK 0.0000059 1277 4:55:16.808 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149faf8 ) S_OK 0.0000056 1278 4:55:16.808 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000056 1279 4:55:16.808 AM 4 SHELL32.dll QISearch ( 0x000ccd70, 0x7c8d7268, IShellFolder2, 0x0149fa80 ) S_OK 0.0000059 1280 4:55:16.818 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000067 1281 4:55:16.818 AM 4 SHELL32.dll QISearch ( 0x000ccc98, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000070 1282 4:55:16.818 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000056 1283 4:55:16.818 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa5c ) S_OK 0.0000056 1284 4:55:16.818 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Desktop" ) 2 0.0000056 1285 4:55:16.818 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa5c ) S_OK 0.0000056 1286 4:55:16.818 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Desktop" ) 8 0.0000056 1287 4:55:16.818 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa5c ) S_OK 0.0000056 1288 4:55:16.818 AM 4 SHELL32.dll StrCmpICW ( "Desktop", "Desktop" ) 0 0.0000056 1289 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb70 ) S_OK 0.0000064 1290 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb44 ) S_OK 0.0000056 1291 4:55:16.838 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000056 1292 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000c1cb0, 0x7c8d7268, IShellFolder2, 0x0149fad8 ) S_OK 0.0000064 1293 4:55:16.838 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000059 1294 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000c6fd0, 0x7c8d7268, IShellFolder2, 0x0149fac4 ) S_OK 0.0000045 1295 4:55:16.838 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 1296 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa90 ) S_OK 0.0000045 1297 4:55:16.838 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Favorites" ) 0 0.0000067 1298 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x021721d0, 0x7c8d7268, IShellFolder2, 0x0149fa5c ) S_OK 0.0000106 1299 4:55:16.838 AM 4 SHELL32.dll StrCmpICW ( "Links", "Links" ) 0 0.0000064 1300 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f2b8 ) S_OK 0.0000103 1301 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149f280 ) S_OK 0.0000045 1302 4:55:16.838 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149ed8c, 260 ) 4 0.0000056 1303 4:55:16.838 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215f8b0 0.0000050 1304 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x0149f230 ) S_OK 0.0000045 1305 4:55:16.838 AM 4 SHELL32.dll StrCpyNW ( 0x0149ed68, "Favorites", 260 ) 0x0149ed68 0.0000042 1306 4:55:16.838 AM 4 SHELL32.dll PathFindExtensionW ( "Favorites" ) 0x0149ed7a 0.0000042 1307 4:55:16.838 AM 4 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000045 1308 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0149f320 ) S_OK 0.0000047 1309 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IPersistFolder3, 0x0149eb44 ) S_OK 0.0000053 1310 4:55:16.838 AM 4 SHELL32.dll StrCpyNW ( 0x0149e8fc, "Documents and Settings", 260 ) 0x0149e8fc 0.0000047 1311 4:55:16.838 AM 4 SHELL32.dll StrCpyNW ( 0x0149eb5e, "Documents and Settings", 257 ) 0x0149eb5e 0.0000042 1312 4:55:16.838 AM 4 SHELL32.dll StrCpyNW ( 0x0149e8fc, "Administrator", 260 ) 0x0149e8fc 0.0000042 1313 4:55:16.838 AM 4 SHELL32.dll StrCpyNW ( 0x0149eb8c, "Administrator", 234 ) 0x0149eb8c 0.0000061 1314 4:55:16.838 AM 4 SHELL32.dll StrCpyNW ( 0x0149e8fc, "Favorites", 260 ) 0x0149e8fc 0.0000042 1315 4:55:16.838 AM 4 SHELL32.dll StrCpyNW ( 0x0149eba8, "Favorites", 220 ) 0x0149eba8 0.0000042 1316 4:55:16.838 AM 4 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Favorites" ) 0x0016f230 0.0000053 1317 4:55:16.838 AM 4 SHELL32.dll StrCpyNW ( 0x0149eb18, "Links", 260 ) 0x0149eb18 0.0000042 1318 4:55:16.838 AM 4 SHELL32.dll StrCpyNW ( 0x0149f020, "Links", 210 ) 0x0149f020 0.0000042 1319 4:55:16.838 AM 4 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Favorites\Links", 0x0149f1e8 ) S_OK 0.0000053 1320 4:55:16.838 AM 4 SHELL32.dll StrRetToBufW ( 0x0149f1e4, 0x02184931, 0x0149f9c8, 260 ) S_OK 0.0000050 1321 4:55:16.838 AM 4 SHELL32.dll StrCpyNW ( 0x0149eecc, "Links", 260 ) 0x0149eecc 0.0000402 1322 4:55:16.838 AM 4 SHELL32.dll PathFindExtensionW ( "Links" ) 0x0149eed6 0.0000045 1323 4:55:16.838 AM 4 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 1324 4:55:16.838 AM 4 SHELL32.dll StrCpyNW ( 0x0149f7c0, "C:\Documents and Settings\Administrator\Favorites\Links", 260 ) 0x0149f7c0 0.0000045 1325 4:55:16.838 AM 4 SHELL32.dll PathStripToRootW ( "C:\Documents and Settings\Administrator\Favorites\Links" ) TRUE 0.0000073 1326 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f338 ) S_OK 0.0000045 1327 4:55:16.838 AM 4 SHELL32.dll SHUnicodeToUnicode ( "C:\Documents and Settings\Administrator\Favorites\Links", 0x0149f340, 260 ) 56 0.0000047 1328 4:55:16.838 AM 4 SHELL32.dll StrDupW ( "::{20D04FE0-3AEA-1069-A2D8-08002B30309D}" ) 0x02180a78 0.0000053 1329 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f1e0 ) S_OK 0.0000045 1330 4:55:16.838 AM 4 SHELL32.dll GUIDFromStringW ( "{20D04FE0-3AEA-1069-A2D8-08002B30309D}", IID_NULL ) TRUE 0.0000059 1331 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f220 ) S_OK 0.0000042 1332 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149f290 ) S_OK 0.0000045 1333 4:55:16.838 AM 4 SHELL32.dll PathBuildRootA ( 0x0149f18f, 2 ) 0x0149f18f 0.0000050 1334 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x0017c580, 0x7c8d81e0, IFileSystemBindData, 0x0149f130 ) S_OK 0.0000047 1335 4:55:16.838 AM 4 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions", 0, KEY_ENUMERATE_SUB_KEYS, 0x0149f0c4 ) ERROR_SUCCESS 0.0000391 1336 4:55:16.838 AM 4 SHELL32.dll SHGetValueW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", "DriveMask", NULL, 0x0149ee8c, 0x0149ee88 ) ERROR_SUCCESS 0.0000690 1337 4:55:16.838 AM 4 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}", 0, KEY_QUERY_VALUE, 0x0149ed48 ) ERROR_SUCCESS 0.0000226 1338 4:55:16.838 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x000007a6, "DriveMask", NULL, 0x0149ed30, 0x0149ee8c, 0x0149ee88 ) ERROR_SUCCESS 0.0000218 1339 4:55:16.838 AM 4 SHLWAPI.dll RegCloseKey ( 0x000007a6 ) ERROR_SUCCESS 0.0000061 1340 4:55:16.838 AM 4 SHELL32.dll PathBuildRootW ( 0x0149f098, 2 ) 0x0149f098 0.0000042 1341 4:55:16.838 AM 4 SHELL32.dll RegCloseKey ( 0x00000796 ) ERROR_SUCCESS 0.0000056 1342 4:55:16.838 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149ecc8, 260 ) 4 0.0000047 1343 4:55:16.838 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215f8b0 0.0000047 1344 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0149f188 ) S_OK 0.0000042 1345 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x0017c580, 0x7c8d81e0, IFileSystemBindData, 0x0149f134 ) S_OK 0.0000050 1346 4:55:16.838 AM 4 SHELL32.dll StrChrW ( "Documents and Settings\Administrator\Favorites\Links", '\' ) 0x0149f372 0.0000045 1347 4:55:16.838 AM 4 SHELL32.dll StrCpyW ( "", "Documents and Settings" ) 0x0219f18a 0.0000042 1348 4:55:16.838 AM 4 SHELL32.dll PathFindExtensionW ( "Documents and Settings" ) 0x0149ef2c 0.0000045 1349 4:55:16.838 AM 4 SHELL32.dll StrChrW ( "Administrator\Favorites\Links", '\' ) 0x0149f38e 0.0000045 1350 4:55:16.838 AM 4 SHELL32.dll StrCpyW ( "", "Administrator" ) 0x0215d998 0.0000045 1351 4:55:16.838 AM 4 SHELL32.dll PathFindExtensionW ( "Administrator" ) 0x0149ef1a 0.0000042 1352 4:55:16.838 AM 4 SHELL32.dll StrChrW ( "Favorites\Links", '\' ) 0x0149f3a2 0.0000042 1353 4:55:16.838 AM 4 SHELL32.dll StrCpyW ( "", "Favorites" ) 0x0017093c 0.0000042 1354 4:55:16.838 AM 4 SHELL32.dll PathFindExtensionW ( "Favorites" ) 0x0149ef12 0.0000042 1355 4:55:16.838 AM 4 SHELL32.dll StrChrW ( "Links", '\' ) NULL 0.0000042 1356 4:55:16.838 AM 4 SHELL32.dll SHUnicodeToUnicode ( "Links", 0x0149ef00, 260 ) 6 0.0000042 1357 4:55:16.838 AM 4 SHELL32.dll StrCpyNW ( 0x0149f108, "", 14 ) 0x0149f108 0.0000042 1358 4:55:16.838 AM 4 SHELL32.dll StrCpyW ( "", "Links" ) 0x0215ef08 0.0000045 1359 4:55:16.838 AM 4 SHELL32.dll PathFindExtensionW ( "Links" ) 0x0149ef0a 0.0000042 1360 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb24 ) S_OK 0.0000045 1361 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149faf8 ) S_OK 0.0000045 1362 4:55:16.838 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 1363 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000ccd70, 0x7c8d7268, IShellFolder2, 0x0149fa80 ) S_OK 0.0000042 1364 4:55:16.838 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 1365 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000ccc98, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000042 1366 4:55:16.838 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 1367 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa58 ) S_OK 0.0000045 1368 4:55:16.838 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Favorites" ) 0 0.0000042 1369 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x0149fa3c ) S_OK 0.0000050 1370 4:55:16.838 AM 4 SHELL32.dll StrCmpICW ( "Links", "Links" ) 0 0.0000042 1371 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb50 ) S_OK 0.0000045 1372 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb24 ) S_OK 0.0000045 1373 4:55:16.838 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 1374 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000ccd70, 0x7c8d7268, IShellFolder2, 0x0149faac ) S_OK 0.0000042 1375 4:55:16.838 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 1376 4:55:16.838 AM 4 SHELL32.dll QISearch ( 0x000ccc98, 0x7c8d7268, IShellFolder2, 0x0149faa0 ) S_OK 0.0000045 1377 4:55:16.838 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0008671 1378 4:55:16.849 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa84 ) S_OK 0.0000045 1379 4:55:16.849 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Favorites" ) 0 0.0000042 1380 4:55:16.849 AM 4 SHELL32.dll QISearch ( 0x02172da0, 0x7c8d7268, IShellFolder2, 0x0149fa68 ) S_OK 0.0000053 1381 4:55:16.849 AM 4 SHELL32.dll StrCmpICW ( "Links", "Links" ) 0 0.0000042 1382 4:55:16.849 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb5c ) S_OK 0.0000042 1383 4:55:16.849 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb30 ) S_OK 0.0000042 1384 4:55:16.849 AM 4 SHELL32.dll StrCmpICA ( "Z:\", "C:\" ) 23 0.0000039 1385 4:55:16.849 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb30 ) S_OK 0.0000045 1386 4:55:16.869 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007f030 ) ERROR_SUCCESS 0.0000120 1387 4:55:16.869 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000770, "REGDBVersion", NULL, NULL, 0x0007f0ac, 0x0007f02c ) ERROR_SUCCESS 0.0000059 1388 4:55:16.869 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000770 ) ERROR_SUCCESS 0.0000056 1389 4:55:16.869 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007f0d8 ) ERROR_SUCCESS 0.0000098 1390 4:55:16.869 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000770, "REGDBVersion", NULL, NULL, 0x0007f154, 0x0007f0d4 ) ERROR_SUCCESS 0.0000056 1391 4:55:16.869 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000770 ) ERROR_SUCCESS 0.0000056 1392 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{9BA05972-F6A8-11CF-A442-00A0C90A8F39}", 0, KEY_READ, 0x0007f2d4 ) ERROR_SUCCESS 0.0000184 1393 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x02189e90 ) ERROR_SUCCESS 0.0000117 1394 4:55:16.869 AM 3 ole32.dll RegCloseKey ( 0x00000772 ) ERROR_SUCCESS 0.0000059 1395 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "CLSID\{9BA05972-F6A8-11CF-A442-00A0C90A8F39}", 0, KEY_READ, 0x0007f3a0 ) ERROR_SUCCESS 0.0000165 1396 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000772, "InprocServer32", 0, KEY_READ, 0x0007f33c ) ERROR_SUCCESS 0.0000212 1397 4:55:16.869 AM 3 ole32.dll RegQueryValueExW ( 0x00000196, "InprocServer32", NULL, 0x0007f348, 0x02194ca0, 0x0007f330 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 1398 4:55:16.869 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000067 1399 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000772, "LocalServer32", 0, KEY_READ, 0x0007f35c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 1400 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000772, "InprocServer32", 0, KEY_READ, 0x0007f35c ) ERROR_SUCCESS 0.0000210 1401 4:55:16.869 AM 3 ole32.dll RegQueryValueExW ( 0x00000196, NULL, NULL, 0x0007f368, 0x02194ca0, 0x0007f350 ) ERROR_SUCCESS 0.0000184 1402 4:55:16.869 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000056 1403 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000772, "InprocHandler32", 0, KEY_READ, 0x0007f35c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 1404 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000772, "LocalServer32", 0, KEY_READ, 0x0007f35c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 1405 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000772, "LocalServer", 0, KEY_READ, 0x0007f35c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 1406 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "CLSID\{9BA05972-F6A8-11CF-A442-00A0C90A8F39}", 0, KEY_READ, 0x0007f300 ) ERROR_SUCCESS 0.0000168 1407 4:55:16.869 AM 3 ole32.dll RegQueryValueExW ( 0x00000196, "AppID", NULL, 0x0007f2d4, 0x0007f304, 0x0007f2c4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000173 1408 4:55:16.869 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000056 1409 4:55:16.869 AM 3 ole32.dll RegCloseKey ( 0x00000772 ) ERROR_SUCCESS 0.0000053 1410 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0007f5a8 ) S_OK 0.0000045 1411 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IMarshal, 0x0007f39c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1412 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, {0000001b-0000-0000-c000-000000000046}, 0x0007f37c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1413 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IUnknown, 0x0007f330 ) S_OK 0.0000045 1414 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IStdMarshalInfo, 0x0007f290 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1415 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IExternalConnection, 0x0218a670 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000067 1416 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, {4c1e39e1-e3e3-4296-aa86-ec938d896e92}, 0x0007f298 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1417 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0007f1d4 ) S_OK 0.0000045 1418 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0011f090 ) S_OK 0.0000042 1419 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0007f1dc ) S_OK 0.0000042 1420 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, ICallFactory, 0x0007fa70 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1421 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IShellWindows, 0x0218cf38 ) S_OK 0.0000045 1422 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IMarshal, 0x0007f53c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000070 1423 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IMarshal, 0x0007f508 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000053 1424 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, {0000001b-0000-0000-c000-000000000046}, 0x0007f4e8 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000053 1425 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IUnknown, 0x0007f49c ) S_OK 0.0000070 1426 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IStdMarshalInfo, 0x0007f3fc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000084 1427 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IExternalConnection, 0x0218adb0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1428 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, {4c1e39e1-e3e3-4296-aa86-ec938d896e92}, 0x0007f404 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1429 4:55:16.869 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IShellWindows, 0x0007f340 ) S_OK 0.0000042 1430 4:55:16.869 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007ed00 ) ERROR_SUCCESS 0.0000184 1431 4:55:16.869 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000770, "REGDBVersion", NULL, NULL, 0x0007ed7c, 0x0007ecfc ) ERROR_SUCCESS 0.0000081 1432 4:55:16.869 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000770 ) ERROR_SUCCESS 0.0000061 1433 4:55:16.869 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007eda8 ) ERROR_SUCCESS 0.0000103 1434 4:55:16.869 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000770, "REGDBVersion", NULL, NULL, 0x0007ee24, 0x0007eda4 ) ERROR_SUCCESS 0.0000059 1435 4:55:16.869 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000770 ) ERROR_SUCCESS 0.0000056 1436 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007efa4 ) ERROR_SUCCESS 0.0000232 1437 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218a148 ) ERROR_SUCCESS 0.0000126 1438 4:55:16.869 AM 3 ole32.dll RegCloseKey ( 0x00000772 ) ERROR_SUCCESS 0.0000059 1439 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000196, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f070 ) ERROR_SUCCESS 0.0000168 1440 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000772, "InprocServer32", 0, KEY_READ, 0x0007f00c ) ERROR_SUCCESS 0.0000221 1441 4:55:16.869 AM 3 ole32.dll RegQueryValueExW ( 0x00000796, "InprocServer32", NULL, 0x0007f018, 0x02194ca0, 0x0007f000 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 1442 4:55:16.869 AM 3 ole32.dll RegCloseKey ( 0x00000796 ) ERROR_SUCCESS 0.0000056 1443 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000772, "LocalServer32", 0, KEY_READ, 0x0007f02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000229 1444 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000772, "InprocServer32", 0, KEY_READ, 0x0007f02c ) ERROR_SUCCESS 0.0000215 1445 4:55:16.869 AM 3 ole32.dll RegQueryValueExW ( 0x00000796, NULL, NULL, 0x0007f038, 0x02194ca0, 0x0007f020 ) ERROR_SUCCESS 0.0000182 1446 4:55:16.869 AM 3 ole32.dll RegCloseKey ( 0x00000796 ) ERROR_SUCCESS 0.0000056 1447 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000772, "InprocHandler32", 0, KEY_READ, 0x0007f02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 1448 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000772, "LocalServer32", 0, KEY_READ, 0x0007f02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 1449 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000772, "LocalServer", 0, KEY_READ, 0x0007f02c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 1450 4:55:16.869 AM 3 ole32.dll RegOpenKeyExW ( 0x00000196, "CLSID\{00020424-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007efd0 ) ERROR_SUCCESS 0.0000168 1451 4:55:16.869 AM 3 ole32.dll RegQueryValueExW ( 0x00000796, "AppID", NULL, 0x0007efa4, 0x0007efd4, 0x0007ef94 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000176 1452 4:55:16.869 AM 3 ole32.dll RegCloseKey ( 0x00000796 ) ERROR_SUCCESS 0.0000056 1453 4:55:16.869 AM 3 ole32.dll RegCloseKey ( 0x00000772 ) ERROR_SUCCESS 0.0000056 1454 4:55:16.879 AM 3 SHDOCVW.dll QISearch ( 0x000b5c28, 0x77983878, IClassFactory, 0x0007f558 ) S_OK 0.0000047 1455 4:55:16.879 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, ICallFactory, 0x0007fa70 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1456 4:55:16.879 AM 3 OLEAUT32.dll RegQueryValueExA ( 0x00000772, "Version", NULL, NULL, 0x0007f674, 0x0007f630 ) ERROR_SUCCESS 0.0000313 1457 4:55:16.879 AM 3 OLEAUT32.dll RegCloseKey ( 0x00000772 ) ERROR_SUCCESS 0.0000059 1458 4:55:16.879 AM 3 OLEAUT32.dll RegCloseKey ( 0x000007a6 ) ERROR_SUCCESS 0.0000061 1459 4:55:16.879 AM 3 OLEAUT32.dll RegCloseKey ( 0x0000079e ) ERROR_SUCCESS 0.0000056 1460 4:55:16.879 AM 3 OLEAUT32.dll RegCloseKey ( 0x00000796 ) ERROR_SUCCESS 0.0000059 1461 4:55:16.879 AM 3 OLEAUT32.dll RegCloseKey ( 0x00000772 ) ERROR_SUCCESS 0.0000053 1462 4:55:16.879 AM 3 SHDOCVW.dll QISearch ( 0x000b25d8, 0x77983848, IShellWindows, 0x00123618 ) S_OK 0.0000042 1463 4:55:16.879 AM 3 ole32.dll RegNotifyChangeKeyValue ( 0x000000e8, TRUE, REG_NOTIFY_CHANGE_LAST_SET | REG_NOTIFY_CHANGE_NAME, 0x000000ec, TRUE ) ERROR_SUCCESS 0.0000101 1464 4:55:16.879 AM 3 ole32.dll RegCloseKey ( 0x00000766 ) ERROR_SUCCESS 0.0000073 1465 4:55:16.879 AM 3 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000059 1466 4:55:16.879 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000056 1467 4:55:16.879 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007f3f8 ) ERROR_SUCCESS 0.0000112 1468 4:55:16.879 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000194, "REGDBVersion", NULL, NULL, 0x0007f474, 0x0007f3f4 ) ERROR_SUCCESS 0.0000059 1469 4:55:16.879 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1470 4:55:16.879 AM 3 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0007f4a0 ) ERROR_SUCCESS 0.0000103 1471 4:55:16.879 AM 3 CLBCatQ.DLL RegQueryValueExW ( 0x00000194, "REGDBVersion", NULL, NULL, 0x0007f51c, 0x0007f49c ) ERROR_SUCCESS 0.0000059 1472 4:55:16.879 AM 3 CLBCatQ.DLL RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1473 4:55:16.879 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f69c ) ERROR_SUCCESS 0.0000184 1474 4:55:16.879 AM 3 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218a148 ) ERROR_SUCCESS 0.0000145 1475 4:55:16.879 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000056 1476 4:55:16.879 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f768 ) ERROR_SUCCESS 0.0000165 1477 4:55:16.879 AM 3 ole32.dll RegOpenKeyExW ( 0x00000196, "InprocServer32", 0, KEY_READ, 0x0007f704 ) ERROR_SUCCESS 0.0000212 1478 4:55:16.879 AM 3 ole32.dll RegQueryValueExW ( 0x00000766, "InprocServer32", NULL, 0x0007f710, 0x02194ca0, 0x0007f6f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000184 1479 4:55:16.879 AM 3 ole32.dll RegCloseKey ( 0x00000766 ) ERROR_SUCCESS 0.0000056 1480 4:55:16.879 AM 3 ole32.dll RegOpenKeyExW ( 0x00000196, "LocalServer32", 0, KEY_READ, 0x0007f724 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 1481 4:55:16.879 AM 3 ole32.dll RegOpenKeyExW ( 0x00000196, "InprocServer32", 0, KEY_READ, 0x0007f724 ) ERROR_SUCCESS 0.0000207 1482 4:55:16.879 AM 3 ole32.dll RegQueryValueExW ( 0x00000766, NULL, NULL, 0x0007f730, 0x02194ca0, 0x0007f718 ) ERROR_SUCCESS 0.0000179 1483 4:55:16.879 AM 3 ole32.dll RegCloseKey ( 0x00000766 ) ERROR_SUCCESS 0.0000056 1484 4:55:16.879 AM 3 ole32.dll RegOpenKeyExW ( 0x00000196, "InprocHandler32", 0, KEY_READ, 0x0007f724 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000198 1485 4:55:16.879 AM 3 ole32.dll RegOpenKeyExW ( 0x00000196, "LocalServer32", 0, KEY_READ, 0x0007f724 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000302 1486 4:55:16.879 AM 3 ole32.dll RegOpenKeyExW ( 0x00000196, "LocalServer", 0, KEY_READ, 0x0007f724 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000305 1487 4:55:16.879 AM 3 ole32.dll RegOpenKeyExW ( 0x00000756, "CLSID\{00020420-0000-0000-C000-000000000046}", 0, KEY_READ, 0x0007f6c8 ) ERROR_SUCCESS 0.0000237 1488 4:55:16.879 AM 3 ole32.dll RegQueryValueExW ( 0x00000766, "AppID", NULL, 0x0007f69c, 0x0007f6cc, 0x0007f68c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 1489 4:55:16.879 AM 3 ole32.dll RegCloseKey ( 0x00000766 ) ERROR_SUCCESS 0.0000064 1490 4:55:16.879 AM 3 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000056 1491 4:55:16.979 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb70 ) S_OK 0.0000053 1492 4:55:16.979 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb44 ) S_OK 0.0000045 1493 4:55:16.979 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 1494 4:55:16.979 AM 4 SHELL32.dll QISearch ( 0x000c1cb0, 0x7c8d7268, IShellFolder2, 0x0149fad8 ) S_OK 0.0000042 1495 4:55:16.979 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 1496 4:55:16.979 AM 4 SHELL32.dll QISearch ( 0x000c6fd0, 0x7c8d7268, IShellFolder2, 0x0149fac4 ) S_OK 0.0000045 1497 4:55:16.979 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 1498 4:55:16.979 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa90 ) S_OK 0.0000042 1499 4:55:16.979 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Favorites" ) 0 0.0000045 1500 4:55:16.979 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb5c ) S_OK 0.0000045 1501 4:55:16.979 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb30 ) S_OK 0.0000045 1502 4:55:16.979 AM 4 SHELL32.dll StrCmpICA ( "Z:\", "C:\" ) 23 0.0000042 1503 4:55:16.979 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb30 ) S_OK 0.0000042 1504 4:55:16.999 AM 2 Explorer.EXE PathFindFileNameW ( "" ) 0x00f2f8fc 0.0000053 1505 4:55:16.999 AM 2 comctl32.dll QISearch ( 0x000c0880, 0x77422f6c, {01e13875-2e58-4671-be46-59945432be6e}, 0x02160a60 ) S_OK 0.0000053 1506 4:55:16.999 AM 2 comctl32.dll QISearch ( 0x02160a30, 0x77423034, {50cf8c58-029d-41bf-b8dd-4ce4f95d9257}, 0x000f59cc ) S_OK 0.0000042 1507 4:55:17.009 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f624 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000712 1508 4:55:17.009 AM 2 SHELL32.dll QISearch ( 0x001707d0, 0x7c92b550, IQueryAssociations, 0x00f2f500 ) S_OK 0.0000045 1509 4:55:17.009 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2f4c4 ) S_OK 0.0000064 1510 4:55:17.009 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e73c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000332 1511 4:55:17.009 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 1512 4:55:17.009 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f3c4, "", 260 ) 0x00f2f3c4 0.0000042 1513 4:55:17.009 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000045 1514 4:55:17.009 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 1515 4:55:17.009 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f38c, "", 260 ) 0x00f2f38c 0.0000042 1516 4:55:17.009 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 1517 4:55:17.009 AM 2 SHELL32.dll PathIsUNCW ( "" ) FALSE 0.0000045 1518 4:55:17.009 AM 2 SHELL32.dll PathGetDriveNumberW ( "" ) -1 0.0000045 1519 4:55:17.009 AM 2 SHELL32.dll PathFindFileNameW ( "" ) 0x0215f910 0.0000042 1520 4:55:17.009 AM 2 SHELL32.dll StrCpyNW ( 0x00f2f384, "", 260 ) 0x00f2f384 0.0000042 1521 4:55:17.009 AM 2 SHELL32.dll StrCmpCW ( "", "" ) 0 0.0000042 1522 4:55:17.009 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f810 ) S_OK 0.0000061 1523 4:55:17.009 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2f8d0, 0x00f2f8c8 ) ERROR_SUCCESS 0.0000196 1524 4:55:17.009 AM 2 Explorer.EXE RegSetValueExW ( 0x00000194, "ProgramCount", 0, REG_DWORD, 0x00f2f8cc, 4 ) ERROR_SUCCESS 0.0000115 1525 4:55:17.009 AM 2 Explorer.EXE RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000078 1526 4:55:17.009 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f048 ) S_OK 0.0000059 1527 4:55:17.009 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000059 1528 4:55:17.009 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2e3a8 ) S_OK 0.0000059 1529 4:55:17.009 AM 2 Explorer.EXE AssocQueryKeyW ( 66, ASSOCKEY_APP, "", NULL, 0x00f2f0b0 ) -2147024894 0x80070002 = The system cannot find the file specified. 0.0000886 1530 4:55:17.009 AM 2 SHELL32.dll QISearch ( 0x001705f0, 0x7c92b550, IQueryAssociations, 0x00f2ef58 ) S_OK 0.0000229 1531 4:55:17.009 AM 2 SHELL32.dll AssocCreate ( {0c2bf91b-8746-4fb1-b4d7-7c03f890b168}, {3c44ba76-de0e-4049-b6e4-6b31a5262707}, 0x00f2ef1c ) S_OK 0.0000070 1532 4:55:17.009 AM 2 SHLWAPI.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "Applications\.exe", 0, MAXIMUM_ALLOWED, 0x0015e73c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000277 1533 4:55:17.009 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000059 1534 4:55:17.009 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000059 1535 4:55:18.771 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2fa78 ) S_OK 0.0000059 1536 4:55:18.771 AM 2 Explorer.EXE RegCreateKeyExW ( HKEY_CURRENT_USER, "SessionInformation", 0, NULL, REG_OPTION_VOLATILE, KEY_SET_VALUE, NULL, 0x00f2faec, 0x00f2fae4 ) ERROR_SUCCESS 0.0000173 1537 4:55:18.771 AM 2 Explorer.EXE RegSetValueExW ( 0x00000284, "ProgramCount", 0, REG_DWORD, 0x00f2fae8, 4 ) ERROR_SUCCESS 0.0000084 1538 4:55:18.771 AM 2 Explorer.EXE RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000061 1539 4:55:18.771 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000047 1540 4:55:20.153 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f95c ) ERROR_SUCCESS 0.0000187 1541 4:55:20.153 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000106 1542 4:55:20.153 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 1543 4:55:20.153 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1544 4:55:20.153 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000120 1545 4:55:20.153 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1546 4:55:20.153 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1547 4:55:20.153 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1548 4:55:20.153 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2fa88 ) ERROR_SUCCESS 0.0000137 1549 4:55:20.153 AM 2 comctl32.dll RegQueryValueExW ( 0x00000284, "Tahoma", NULL, 0x00f2fa80, 0x00f2fae8, 0x00f2fa84 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1550 4:55:20.153 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1551 4:55:20.153 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f95c ) ERROR_SUCCESS 0.0000165 1552 4:55:20.153 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000095 1553 4:55:20.153 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1554 4:55:20.153 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1555 4:55:20.153 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000115 1556 4:55:20.153 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1557 4:55:20.153 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1558 4:55:20.153 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1559 4:55:20.153 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f95c ) ERROR_SUCCESS 0.0000151 1560 4:55:20.153 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000095 1561 4:55:20.153 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1562 4:55:20.153 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1563 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000221 1564 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1565 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1566 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000067 1567 4:55:20.163 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f95c ) ERROR_SUCCESS 0.0000156 1568 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000095 1569 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1570 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1571 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000109 1572 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1573 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1574 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1575 4:55:20.163 AM 2 Explorer.EXE StrCmpICW ( "潓瑦慷敲䵜捩潲潳瑦䥜瑮牥敮⁴硅汰牯牥呜灹摥剕獌退䩀㰷뫤ᇏ綿ꨀ椀Software\Microsoft\Internet Explorer\TabbedBrowsing", "Policy" ) 28387 0.0000045 1576 4:55:20.163 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f274 ) ERROR_SUCCESS 0.0000145 1577 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f27c ) ERROR_SUCCESS 0.0000092 1578 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f278 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1579 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000059 1580 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f27c ) ERROR_SUCCESS 0.0000115 1581 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f278 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1582 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1583 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000087 1584 4:55:20.163 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewScrollOver", FALSE, FALSE ) FALSE 0.0000930 1585 4:55:20.163 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000140 1586 4:55:20.163 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000284, "ListviewScrollOver", NULL, 0x00f2f144, 0x00f2f148, 0x00f2f140 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1587 4:55:20.163 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a40 ) ERROR_SUCCESS 0.0000142 1588 4:55:20.163 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "ListviewScrollOver", NULL, 0x00f2f144, 0x00f2f148, 0x00f2f140 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 1589 4:55:20.163 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000098 1590 4:55:20.163 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000067 1591 4:55:20.163 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewWatermark", FALSE, FALSE ) FALSE 0.0000489 1592 4:55:20.163 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000151 1593 4:55:20.163 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000284, "ListviewWatermark", NULL, 0x00f2f144, 0x00f2f148, 0x00f2f140 ) ERROR_SUCCESS 0.0000075 1594 4:55:20.163 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1595 4:55:20.163 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewAlphaSelect", FALSE, FALSE ) FALSE 0.0000416 1596 4:55:20.163 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000117 1597 4:55:20.163 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000284, "ListviewAlphaSelect", NULL, 0x00f2f144, 0x00f2f148, 0x00f2f140 ) ERROR_SUCCESS 0.0000061 1598 4:55:20.163 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000053 1599 4:55:20.163 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewShadow", FALSE, FALSE ) FALSE 0.0000433 1600 4:55:20.163 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000126 1601 4:55:20.163 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000284, "ListviewShadow", NULL, 0x00f2f144, 0x00f2f148, 0x00f2f140 ) ERROR_SUCCESS 0.0000061 1602 4:55:20.163 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1603 4:55:20.163 AM 2 Explorer.EXE StrCmpNICW ( "潓瑦慷敲䵜捩潲潳瑦䥜瑮牥敮⁴硅汰牯牥呜灹摥剕獌退䩀㰷뫤ᇏ綿ꨀ椀Software\Microsoft\Internet Explorer\TabbedBrowsing", "Software\Clients", 16 ) 28384 0.0000045 1604 4:55:20.163 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f274 ) ERROR_SUCCESS 0.0000170 1605 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f27c ) ERROR_SUCCESS 0.0000098 1606 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f278 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1607 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1608 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f27c ) ERROR_SUCCESS 0.0000115 1609 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f278 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1610 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1611 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1612 4:55:20.163 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewScrollOver", FALSE, FALSE ) FALSE 0.0000824 1613 4:55:20.163 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000120 1614 4:55:20.163 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000284, "ListviewScrollOver", NULL, 0x00f2f144, 0x00f2f148, 0x00f2f140 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1615 4:55:20.163 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a40 ) ERROR_SUCCESS 0.0000120 1616 4:55:20.163 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "ListviewScrollOver", NULL, 0x00f2f144, 0x00f2f148, 0x00f2f140 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000053 1617 4:55:20.163 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1618 4:55:20.163 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000064 1619 4:55:20.163 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewWatermark", FALSE, FALSE ) FALSE 0.0000430 1620 4:55:20.163 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000126 1621 4:55:20.163 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000284, "ListviewWatermark", NULL, 0x00f2f144, 0x00f2f148, 0x00f2f140 ) ERROR_SUCCESS 0.0000064 1622 4:55:20.163 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000053 1623 4:55:20.163 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewAlphaSelect", FALSE, FALSE ) FALSE 0.0000422 1624 4:55:20.163 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000117 1625 4:55:20.163 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000284, "ListviewAlphaSelect", NULL, 0x00f2f144, 0x00f2f148, 0x00f2f140 ) ERROR_SUCCESS 0.0000061 1626 4:55:20.163 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1627 4:55:20.163 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewShadow", FALSE, FALSE ) FALSE 0.0000425 1628 4:55:20.163 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000120 1629 4:55:20.163 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000284, "ListviewShadow", NULL, 0x00f2f144, 0x00f2f148, 0x00f2f140 ) ERROR_SUCCESS 0.0000061 1630 4:55:20.163 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000053 1631 4:55:20.163 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f3d8 ) ERROR_SUCCESS 0.0000159 1632 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f3e0 ) ERROR_SUCCESS 0.0000098 1633 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f3dc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1634 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1635 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f3e0 ) ERROR_SUCCESS 0.0000112 1636 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f3dc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1637 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1638 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000053 1639 4:55:20.163 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f1a0 ) ERROR_SUCCESS 0.0000154 1640 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f1a8 ) ERROR_SUCCESS 0.0000095 1641 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f1a4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1642 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1643 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f1a8 ) ERROR_SUCCESS 0.0000173 1644 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f1a4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1645 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000081 1646 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000075 1647 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2f758 ) ERROR_SUCCESS 0.0000168 1648 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000284, "Tahoma", NULL, 0x00f2f750, 0x00f2f7b8, 0x00f2f754 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000106 1649 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000075 1650 4:55:20.163 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f95c ) ERROR_SUCCESS 0.0000204 1651 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000140 1652 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 1653 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000075 1654 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000151 1655 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1656 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000075 1657 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000073 1658 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2fa88 ) ERROR_SUCCESS 0.0000154 1659 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000284, "Tahoma", NULL, 0x00f2fa80, 0x00f2fae8, 0x00f2fa84 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 1660 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000073 1661 4:55:20.163 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f95c ) ERROR_SUCCESS 0.0000603 1662 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000129 1663 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 1664 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000075 1665 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000151 1666 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1667 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000073 1668 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000073 1669 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2fa88 ) ERROR_SUCCESS 0.0000154 1670 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000284, "Tahoma", NULL, 0x00f2fa80, 0x00f2fae8, 0x00f2fa84 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 1671 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000073 1672 4:55:20.163 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f95c ) ERROR_SUCCESS 0.0000201 1673 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000179 1674 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 1675 4:55:20.163 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000073 1676 4:55:20.163 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000148 1677 4:55:20.163 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0064715 1678 4:55:20.173 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000089 1679 4:55:20.173 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000081 1680 4:55:20.173 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2fa88 ) ERROR_SUCCESS 0.0000215 1681 4:55:20.173 AM 2 comctl32.dll RegQueryValueExW ( 0x00000284, "Tahoma", NULL, 0x00f2fa80, 0x00f2fae8, 0x00f2fa84 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000106 1682 4:55:20.173 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000075 1683 4:55:20.173 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f95c ) ERROR_SUCCESS 0.0000313 1684 4:55:20.173 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000137 1685 4:55:20.173 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000129 1686 4:55:20.173 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000075 1687 4:55:20.173 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000162 1688 4:55:20.173 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1689 4:55:20.173 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000075 1690 4:55:20.173 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000075 1691 4:55:20.173 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2fa88 ) ERROR_SUCCESS 0.0000156 1692 4:55:20.173 AM 2 comctl32.dll RegQueryValueExW ( 0x00000284, "Tahoma", NULL, 0x00f2fa80, 0x00f2fae8, 0x00f2fa84 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 1693 4:55:20.173 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000073 1694 4:55:20.173 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f95c ) ERROR_SUCCESS 0.0000196 1695 4:55:20.173 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000126 1696 4:55:20.173 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 1697 4:55:20.173 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000075 1698 4:55:20.173 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f964 ) ERROR_SUCCESS 0.0000154 1699 4:55:20.173 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f960 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 1700 4:55:20.173 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000073 1701 4:55:20.173 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000075 1702 4:55:20.173 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2fa88 ) ERROR_SUCCESS 0.0000156 1703 4:55:20.173 AM 2 comctl32.dll RegQueryValueExW ( 0x00000284, "Tahoma", NULL, 0x00f2fa80, 0x00f2fae8, 0x00f2fa84 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1704 4:55:20.173 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1705 4:55:20.173 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2fb98 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000047 1706 4:55:20.173 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fb7c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1707 4:55:20.173 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2fb7c ) S_OK 0.0000047 1708 4:55:20.173 AM 2 BROWSEUI.dll StrCpyNW ( 0x00f2f838, "The language bar", 256 ) 0x00f2f838 0.0000047 1709 4:55:20.173 AM 2 BROWSEUI.dll StrCpyNW ( 0x000d4b7c, "The language bar", 256 ) 0x000d4b7c 0.0000045 1710 4:55:20.173 AM 2 BROWSEUI.dll SHUnicodeToUnicode ( "The language bar", 0x00f2fab8, 40 ) 17 0.0000047 1711 4:55:20.173 AM 2 BROWSEUI.dll StrCpyNW ( 0x00f2f838, "", 256 ) 0x00f2f838 0.0000042 1712 4:55:20.173 AM 2 BROWSEUI.dll StrCpyNW ( 0x000d34d4, "", 256 ) 0x000d34d4 0.0000042 1713 4:55:20.173 AM 2 BROWSEUI.dll SHUnicodeToUnicode ( "", 0x00f2fab8, 40 ) 1 0.0000042 1714 4:55:20.173 AM 2 BROWSEUI.dll StrCpyNW ( 0x00f2f838, "Quick Launch", 256 ) 0x00f2f838 0.0000042 1715 4:55:20.173 AM 2 SHELL32.dll PathCombineW ( 0x00f2f5c4, "C:\Documents and Settings\Administrator\Application Data", "Microsoft\Internet Explorer\Quick Launch" ) 0x00f2f5c4 0.0000095 1716 4:55:20.173 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x00f2eec8 ) S_OK 0.0000045 1717 4:55:20.173 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x00f2ee90 ) S_OK 0.0000045 1718 4:55:20.173 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x00f2e99c, 260 ) 4 0.0000047 1719 4:55:20.173 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215f9a0 0.0000047 1720 4:55:20.173 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x00f2ee40 ) S_OK 0.0000045 1721 4:55:20.173 AM 2 SHELL32.dll PathFindExtensionW ( "Internet Explorer" ) 0x00f2e99a 0.0006872 1722 4:55:20.183 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000045 1723 4:55:20.183 AM 2 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x00f2ef30 ) S_OK 0.0000042 1724 4:55:20.183 AM 2 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IPersistFolder3, 0x00f2e754 ) S_OK 0.0000045 1725 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e50c, "Documents and Settings", 260 ) 0x00f2e50c 0.0000042 1726 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e76e, "Documents and Settings", 257 ) 0x00f2e76e 0.0000042 1727 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e50c, "Administrator", 260 ) 0x00f2e50c 0.0000045 1728 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e79c, "Administrator", 234 ) 0x00f2e79c 0.0000045 1729 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e50c, "Application Data", 260 ) 0x00f2e50c 0.0000042 1730 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e7b8, "Application Data", 220 ) 0x00f2e7b8 0.0000042 1731 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e7da, "Microsoft", 203 ) 0x00f2e7da 0.0000042 1732 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e7ee, "Internet Explorer", 193 ) 0x00f2e7ee 0.0000042 1733 4:55:20.183 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer" ) 0x001850c0 0.0000056 1734 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2ec76, "Quick Launch", 175 ) 0x00f2ec76 0.0000042 1735 4:55:20.183 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch", 0x00f2edf8 ) S_OK 0.0000053 1736 4:55:20.183 AM 2 SHELL32.dll StrRetToBufW ( 0x00f2edf4, 0x02756081, 0x00f2f3bc, 260 ) S_OK 0.0000050 1737 4:55:20.183 AM 2 SHELL32.dll PathFindExtensionW ( "Quick Launch" ) 0x00f2eaf4 0.0000042 1738 4:55:20.183 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 1739 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, IBandSite, 0x00f2f15c ) S_OK 0.0000045 1740 4:55:20.183 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x00f2f0e8 ) S_OK 0.0000042 1741 4:55:20.183 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x00f2f0b0 ) S_OK 0.0000047 1742 4:55:20.183 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x00f2ebbc, 260 ) 4 0.0000047 1743 4:55:20.183 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215f9a0 0.0000045 1744 4:55:20.183 AM 2 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x00f2f060 ) S_OK 0.0000042 1745 4:55:20.183 AM 2 SHELL32.dll PathFindExtensionW ( "Internet Explorer" ) 0x00f2ebba 0.0000045 1746 4:55:20.183 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 1747 4:55:20.183 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x00f2f158 ) S_OK 0.0000042 1748 4:55:20.183 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IPersistFolder3, 0x00f2e974 ) S_OK 0.0000045 1749 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e72c, "Documents and Settings", 260 ) 0x00f2e72c 0.0000042 1750 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e98e, "Documents and Settings", 257 ) 0x00f2e98e 0.0000045 1751 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e72c, "Administrator", 260 ) 0x00f2e72c 0.0000042 1752 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e9bc, "Administrator", 234 ) 0x00f2e9bc 0.0000042 1753 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e72c, "Application Data", 260 ) 0x00f2e72c 0.0000047 1754 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e9d8, "Application Data", 220 ) 0x00f2e9d8 0.0000042 1755 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e9fa, "Microsoft", 203 ) 0x00f2e9fa 0.0000042 1756 4:55:20.183 AM 2 SHELL32.dll StrCpyNW ( 0x00f2ea0e, "Internet Explorer", 193 ) 0x00f2ea0e 0.0000042 1757 4:55:20.183 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer" ) 0x001850c0 0.0000053 1758 4:55:20.183 AM 2 SHELL32.dll PathRemoveBackslashW ( "C:\Documents and Settings\Administrator\Recent" ) 0x00f2e79a 0.0000056 1759 4:55:20.183 AM 2 SHELL32.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Recent", "C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer", "姴̡" ) 39 0.0000064 1760 4:55:20.183 AM 2 SHELL32.dll PathFindExtensionW ( "Quick Launch" ) 0x00f2e978 0.0000042 1761 4:55:20.183 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 1762 4:55:20.183 AM 2 SHELL32.dll SHStrDupW ( "Quick Launch", 0x00f2f018 ) S_OK 0.0000047 1763 4:55:20.183 AM 2 SHELL32.dll StrRetToBufW ( 0x00f2f014, 0x000d1d61, 0x00f2f838, 256 ) S_OK 0.0000045 1764 4:55:20.183 AM 2 BROWSEUI.dll StrCpyNW ( 0x000a7abc, "Quick Launch", 256 ) 0x000a7abc 0.0000042 1765 4:55:20.183 AM 2 BROWSEUI.dll SHUnicodeToUnicode ( "Quick Launch", 0x00f2fab8, 40 ) 13 0.0000045 1766 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f5cc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1767 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f5b0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1768 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f5b0 ) S_OK 0.0000045 1769 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f5cc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1770 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f5b0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000070 1771 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f5b0 ) S_OK 0.0000045 1772 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f5cc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1773 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f5b0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1774 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f5b0 ) S_OK 0.0000045 1775 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f628 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1776 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f60c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1777 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f60c ) S_OK 0.0000045 1778 4:55:20.183 AM 2 BROWSEUI.dll IsOS ( 18 ) TRUE 0.0000045 1779 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, IDeskBarClient, 0x00f2f898 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1780 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, IDeskBarClient, 0x00f2f898 ) S_OK 0.0000045 1781 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f2cc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1782 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f2b0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1783 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f2b0 ) S_OK 0.0000045 1784 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f2cc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1785 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f2b0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1786 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f2b0 ) S_OK 0.0000045 1787 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f2cc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1788 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f2b0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1789 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f2b0 ) S_OK 0.0000045 1790 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f328 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1791 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f30c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1792 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f30c ) S_OK 0.0000045 1793 4:55:20.183 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f7a4 ) ERROR_SUCCESS 0.0000210 1794 4:55:20.183 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f7ac ) ERROR_SUCCESS 0.0000103 1795 4:55:20.183 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f7a8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 1796 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000061 1797 4:55:20.183 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f7ac ) ERROR_SUCCESS 0.0000123 1798 4:55:20.183 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f7a8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1799 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1800 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1801 4:55:20.183 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f35c ) ERROR_SUCCESS 0.0000165 1802 4:55:20.183 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f364 ) ERROR_SUCCESS 0.0000095 1803 4:55:20.183 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f360 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1804 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1805 4:55:20.183 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f364 ) ERROR_SUCCESS 0.0000115 1806 4:55:20.183 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f360 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1807 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1808 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1809 4:55:20.183 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f124 ) ERROR_SUCCESS 0.0000142 1810 4:55:20.183 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f12c ) ERROR_SUCCESS 0.0000095 1811 4:55:20.183 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f128 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1812 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1813 4:55:20.183 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f12c ) ERROR_SUCCESS 0.0000109 1814 4:55:20.183 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f128 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000126 1815 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000081 1816 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000073 1817 4:55:20.183 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2f250 ) ERROR_SUCCESS 0.0000137 1818 4:55:20.183 AM 2 comctl32.dll RegQueryValueExW ( 0x00000284, "Tahoma", NULL, 0x00f2f248, 0x00f2f2b0, 0x00f2f24c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 1819 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1820 4:55:20.183 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f494 ) ERROR_SUCCESS 0.0000168 1821 4:55:20.183 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f49c ) ERROR_SUCCESS 0.0000098 1822 4:55:20.183 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f498 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 1823 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1824 4:55:20.183 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f49c ) ERROR_SUCCESS 0.0000112 1825 4:55:20.183 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f498 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1826 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000064 1827 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1828 4:55:20.183 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f25c ) ERROR_SUCCESS 0.0000156 1829 4:55:20.183 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f264 ) ERROR_SUCCESS 0.0000098 1830 4:55:20.183 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f260 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1831 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1832 4:55:20.183 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f264 ) ERROR_SUCCESS 0.0000112 1833 4:55:20.183 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f260 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1834 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1835 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1836 4:55:20.183 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2f388 ) ERROR_SUCCESS 0.0000117 1837 4:55:20.183 AM 2 comctl32.dll RegQueryValueExW ( 0x00000284, "Tahoma", NULL, 0x00f2f380, 0x00f2f3e8, 0x00f2f384 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1838 4:55:20.183 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000053 1839 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f5b0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000210 1840 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f594 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1841 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f594 ) S_OK 0.0000045 1842 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f5b0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1843 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f594 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1844 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f594 ) S_OK 0.0000045 1845 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f5b0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1846 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f594 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1847 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f594 ) S_OK 0.0000045 1848 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f60c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1849 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f5f0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1850 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f5f0 ) S_OK 0.0000045 1851 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f6d4 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1852 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f6b8 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1853 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f6b8 ) S_OK 0.0000042 1854 4:55:20.183 AM 2 BROWSEUI.dll IsOS ( 18 ) TRUE 0.0000045 1855 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, IDeskBarClient, 0x00f2f3d4 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1856 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, IDeskBarClient, 0x00f2f3d4 ) S_OK 0.0000045 1857 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ee08 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1858 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2edec ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1859 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2edec ) S_OK 0.0000045 1860 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ee08 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1861 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2edec ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1862 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2edec ) S_OK 0.0000042 1863 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ee08 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1864 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2edec ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1865 4:55:20.183 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2edec ) S_OK 0.0000042 1866 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ee64 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1867 4:55:20.183 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ee48 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1868 4:55:20.193 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ee48 ) S_OK 0.0000067 1869 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f67c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000047 1870 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f660 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1871 4:55:20.193 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f660 ) S_OK 0.0000047 1872 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f67c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1873 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f660 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1874 4:55:20.193 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f660 ) S_OK 0.0000042 1875 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f67c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 1876 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f660 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 1877 4:55:20.193 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f660 ) S_OK 0.0000045 1878 4:55:20.193 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x00030036 ) S_FALSE 0.0000047 1879 4:55:20.193 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x0003003a ) S_FALSE 0.0000042 1880 4:55:20.193 AM 2 comctl32.dll QISearch ( 0x000bf030, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f9a0 ) S_OK 0.0000050 1881 4:55:20.193 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x00030038 ) S_FALSE 0.0000042 1882 4:55:20.193 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x0003003c ) S_FALSE 0.0000042 1883 4:55:20.193 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f7e8 ) ERROR_SUCCESS 0.0000302 1884 4:55:20.193 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f7f0 ) ERROR_SUCCESS 0.0000115 1885 4:55:20.193 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f7ec ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000115 1886 4:55:20.193 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000064 1887 4:55:20.193 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f7f0 ) ERROR_SUCCESS 0.0000126 1888 4:55:20.193 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f7ec ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 1889 4:55:20.193 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1890 4:55:20.193 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1891 4:55:20.193 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x0003003e ) S_FALSE 0.0000045 1892 4:55:20.193 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f51c ) ERROR_SUCCESS 0.0000151 1893 4:55:20.193 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f524 ) ERROR_SUCCESS 0.0000109 1894 4:55:20.193 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f520 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1895 4:55:20.193 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1896 4:55:20.193 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f524 ) ERROR_SUCCESS 0.0000123 1897 4:55:20.193 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f520 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1898 4:55:20.193 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1899 4:55:20.193 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1900 4:55:20.193 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f2e4 ) ERROR_SUCCESS 0.0000151 1901 4:55:20.193 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f2ec ) ERROR_SUCCESS 0.0000092 1902 4:55:20.193 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f2e8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1903 4:55:20.193 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1904 4:55:20.193 AM 2 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f2ec ) ERROR_SUCCESS 0.0000109 1905 4:55:20.193 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f2e8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 1906 4:55:20.193 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000109 1907 4:55:20.193 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000061 1908 4:55:20.193 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2f410 ) ERROR_SUCCESS 0.0000145 1909 4:55:20.193 AM 2 comctl32.dll RegQueryValueExW ( 0x00000284, "Tahoma", NULL, 0x00f2f408, 0x00f2f470, 0x00f2f40c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 1910 4:55:20.193 AM 2 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000056 1911 4:55:20.193 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x00030040 ) S_FALSE 0.0000045 1912 4:55:20.193 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x00010058 ) S_OK 0.0000039 1913 4:55:20.193 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x00010066 ) S_OK 0.0000045 1914 4:55:20.193 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x0001005e ) S_OK 0.0000042 1915 4:55:20.193 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x00010062 ) S_OK 0.0000042 1916 4:55:20.193 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x0001005c ) S_OK 0.0000042 1917 4:55:20.193 AM 2 comctl32.dll QISearch ( 0x000bf030, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000081 1918 4:55:20.193 AM 2 comctl32.dll QISearch ( 0x000bf030, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000056 1919 4:55:20.193 AM 2 comctl32.dll QISearch ( 0x000bf030, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f69c ) S_OK 0.0000059 1920 4:55:20.193 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f6a4 ) S_OK 0.0000070 1921 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f3b4 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000061 1922 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f398 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000053 1923 4:55:20.193 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f398 ) S_OK 0.0000059 1924 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f3a4 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000053 1925 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f388 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000053 1926 4:55:20.193 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f388 ) S_OK 0.0000053 1927 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f3fc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000056 1928 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f3e0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000050 1929 4:55:20.193 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f3e0 ) S_OK 0.0000053 1930 4:55:20.193 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x0001005e, 0x0001005c ) S_FALSE 0.0000061 1931 4:55:20.193 AM 2 comctl32.dll QISearch ( 0x000acd28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f664 ) S_OK 0.0000059 1932 4:55:20.193 AM 2 comctl32.dll QISearch ( 0x000acd28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f664 ) S_OK 0.0000059 1933 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f3fc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000056 1934 4:55:20.193 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f3e0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000056 1935 4:55:20.193 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f3e0 ) S_OK 0.0000059 1936 4:55:20.193 AM 3 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x0007f90c ) ERROR_SUCCESS 0.0000324 1937 4:55:20.193 AM 3 comctl32.dll RegOpenKeyExW ( 0x00000284, "Control Panel\Desktop", 0, KEY_READ, 0x0007f914 ) ERROR_SUCCESS 0.0000145 1938 4:55:20.193 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x0007f910 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000137 1939 4:55:20.193 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000081 1940 4:55:20.193 AM 3 comctl32.dll RegOpenKeyExW ( 0x00000284, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x0007f914 ) ERROR_SUCCESS 0.0000162 1941 4:55:20.193 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x0007f910 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 1942 4:55:20.193 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000073 1943 4:55:20.193 AM 3 comctl32.dll RegCloseKey ( 0x00000284 ) ERROR_SUCCESS 0.0000075 1944 4:55:20.233 AM 2 webcheck.dll StrCmpICW ( "潓瑦慷敲䵜捩潲潳瑦䥜瑮牥敮⁴硅汰牯牥呜灹摥剕獌退䩀㰷뫤ᇏ綿ꨀ椀Software\Microsoft\Internet Explorer\TabbedBrowsing", "policy" ) 28387 0.0000061 1945 4:55:20.233 AM 3 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x0007f90c ) ERROR_SUCCESS 0.0000170 1946 4:55:20.233 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x0007f914 ) ERROR_SUCCESS 0.0000095 1947 4:55:20.233 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x0007f910 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 1948 4:55:20.233 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1949 4:55:20.233 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x0007f914 ) ERROR_SUCCESS 0.0000112 1950 4:55:20.233 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x0007f910 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1951 4:55:20.233 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1952 4:55:20.233 AM 3 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 1953 4:55:20.233 AM 3 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x0007fa38 ) ERROR_SUCCESS 0.0000140 1954 4:55:20.233 AM 3 comctl32.dll RegQueryValueExW ( 0x000001e8, "Tahoma", NULL, 0x0007fa30, 0x0007fa98, 0x0007fa34 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 1955 4:55:20.233 AM 3 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000064 1956 4:55:20.243 AM 3 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x0007f3e0 ) ERROR_SUCCESS 0.0000162 1957 4:55:20.243 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x0007f3e8 ) ERROR_SUCCESS 0.0000087 1958 4:55:20.243 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x0007f3e4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1959 4:55:20.243 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000059 1960 4:55:20.243 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x0007f3e8 ) ERROR_SUCCESS 0.0000117 1961 4:55:20.243 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x0007f3e4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1962 4:55:20.243 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1963 4:55:20.243 AM 3 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 1964 4:55:20.243 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewScrollOver", FALSE, FALSE ) FALSE 0.0000830 1965 4:55:20.243 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000131 1966 4:55:20.243 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewScrollOver", NULL, 0x0007f2b0, 0x0007f2b4, 0x0007f2ac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1967 4:55:20.243 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a40 ) ERROR_SUCCESS 0.0000126 1968 4:55:20.243 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "ListviewScrollOver", NULL, 0x0007f2b0, 0x0007f2b4, 0x0007f2ac ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000053 1969 4:55:20.243 AM 3 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1970 4:55:20.243 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000050 1971 4:55:20.243 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewWatermark", FALSE, FALSE ) FALSE 0.0000458 1972 4:55:20.243 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000137 1973 4:55:20.243 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewWatermark", NULL, 0x0007f2b0, 0x0007f2b4, 0x0007f2ac ) ERROR_SUCCESS 0.0000070 1974 4:55:20.243 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 1975 4:55:20.243 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewAlphaSelect", FALSE, FALSE ) FALSE 0.0000427 1976 4:55:20.243 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000117 1977 4:55:20.243 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewAlphaSelect", NULL, 0x0007f2b0, 0x0007f2b4, 0x0007f2ac ) ERROR_SUCCESS 0.0000061 1978 4:55:20.243 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 1979 4:55:20.243 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewShadow", FALSE, FALSE ) FALSE 0.0000419 1980 4:55:20.243 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000117 1981 4:55:20.243 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewShadow", NULL, 0x0007f2b0, 0x0007f2b4, 0x0007f2ac ) ERROR_SUCCESS 0.0000061 1982 4:55:20.243 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000053 1983 4:55:20.243 AM 3 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x0007f6a4 ) ERROR_SUCCESS 0.0000148 1984 4:55:20.243 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x0007f6ac ) ERROR_SUCCESS 0.0000092 1985 4:55:20.243 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x0007f6a8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 1986 4:55:20.243 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 1987 4:55:20.243 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x0007f6ac ) ERROR_SUCCESS 0.0000115 1988 4:55:20.243 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x0007f6a8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 1989 4:55:20.243 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1990 4:55:20.243 AM 3 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 1991 4:55:20.243 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewScrollOver", FALSE, FALSE ) FALSE 0.0000788 1992 4:55:20.243 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000117 1993 4:55:20.243 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewScrollOver", NULL, 0x0007f574, 0x0007f578, 0x0007f570 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 1994 4:55:20.243 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a40 ) ERROR_SUCCESS 0.0000117 1995 4:55:20.243 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "ListviewScrollOver", NULL, 0x0007f574, 0x0007f578, 0x0007f570 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000053 1996 4:55:20.243 AM 3 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 1997 4:55:20.243 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000053 1998 4:55:20.243 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewWatermark", FALSE, FALSE ) FALSE 0.0000450 1999 4:55:20.243 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000137 2000 4:55:20.243 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewWatermark", NULL, 0x0007f574, 0x0007f578, 0x0007f570 ) ERROR_SUCCESS 0.0000064 2001 4:55:20.243 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2002 4:55:20.243 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewAlphaSelect", FALSE, FALSE ) FALSE 0.0000419 2003 4:55:20.243 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000115 2004 4:55:20.243 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewAlphaSelect", NULL, 0x0007f574, 0x0007f578, 0x0007f570 ) ERROR_SUCCESS 0.0000061 2005 4:55:20.243 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000053 2006 4:55:20.243 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewShadow", FALSE, FALSE ) FALSE 0.0000419 2007 4:55:20.243 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000115 2008 4:55:20.243 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewShadow", NULL, 0x0007f574, 0x0007f578, 0x0007f570 ) ERROR_SUCCESS 0.0000059 2009 4:55:20.243 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2010 4:55:20.243 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f28c ) ERROR_SUCCESS 0.0000159 2011 4:55:20.243 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000101 2012 4:55:20.243 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2013 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2014 4:55:20.243 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000112 2015 4:55:20.243 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000109 2016 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000084 2017 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000084 2018 4:55:20.243 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2f3b8 ) ERROR_SUCCESS 0.0000210 2019 4:55:20.243 AM 2 comctl32.dll RegQueryValueExW ( 0x000001e8, "Tahoma", NULL, 0x00f2f3b0, 0x00f2f418, 0x00f2f3b4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000212 2020 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000198 2021 4:55:20.243 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f28c ) ERROR_SUCCESS 0.0000332 2022 4:55:20.243 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000182 2023 4:55:20.243 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000176 2024 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000064 2025 4:55:20.243 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000129 2026 4:55:20.243 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2027 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2028 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2029 4:55:20.243 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f28c ) ERROR_SUCCESS 0.0000243 2030 4:55:20.243 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000117 2031 4:55:20.243 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000707 2032 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000081 2033 4:55:20.243 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000154 2034 4:55:20.243 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000092 2035 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2036 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2037 4:55:20.243 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f28c ) ERROR_SUCCESS 0.0000156 2038 4:55:20.243 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000095 2039 4:55:20.243 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2040 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2041 4:55:20.243 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000123 2042 4:55:20.243 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2043 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000059 2044 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2045 4:55:20.243 AM 2 Explorer.EXE StrCmpICW ( "潓瑦慷敲䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮硅汰牯牥剜湵前U邐潓瑦慷敲䵜捩潲潳瑦䥜瑮牥敮⁴硅汰牯牥呜灹摥剕獌退䩀㰷뫤ᇏ綿ꨀ椀Software\Microsoft\Internet Explorer\TabbedBrowsing", "Policy" ) 28387 0.0000047 2046 4:55:20.243 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2eba4 ) ERROR_SUCCESS 0.0000156 2047 4:55:20.243 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2ebac ) ERROR_SUCCESS 0.0000095 2048 4:55:20.243 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2eba8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2049 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2050 4:55:20.243 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2ebac ) ERROR_SUCCESS 0.0000115 2051 4:55:20.243 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2eba8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2052 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2053 4:55:20.243 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000059 2054 4:55:20.243 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewScrollOver", FALSE, FALSE ) FALSE 0.0012672 2055 4:55:20.243 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000151 2056 4:55:20.243 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewScrollOver", NULL, 0x00f2ea74, 0x00f2ea78, 0x00f2ea70 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2057 4:55:20.243 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a40 ) ERROR_SUCCESS 0.0000134 2058 4:55:20.243 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "ListviewScrollOver", NULL, 0x00f2ea74, 0x00f2ea78, 0x00f2ea70 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000053 2059 4:55:20.243 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2060 4:55:20.243 AM 2 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0011809 2061 4:55:20.253 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewWatermark", FALSE, FALSE ) FALSE 0.0000620 2062 4:55:20.253 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000235 2063 4:55:20.253 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewWatermark", NULL, 0x00f2ea74, 0x00f2ea78, 0x00f2ea70 ) ERROR_SUCCESS 0.0000095 2064 4:55:20.253 AM 2 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000064 2065 4:55:20.253 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewAlphaSelect", FALSE, FALSE ) FALSE 0.0000444 2066 4:55:20.253 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000131 2067 4:55:20.253 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewAlphaSelect", NULL, 0x00f2ea74, 0x00f2ea78, 0x00f2ea70 ) ERROR_SUCCESS 0.0000064 2068 4:55:20.253 AM 2 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2069 4:55:20.253 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewShadow", FALSE, FALSE ) FALSE 0.0000427 2070 4:55:20.253 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000123 2071 4:55:20.253 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewShadow", NULL, 0x00f2ea74, 0x00f2ea78, 0x00f2ea70 ) ERROR_SUCCESS 0.0000061 2072 4:55:20.253 AM 2 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2073 4:55:20.253 AM 2 Explorer.EXE StrCmpNICW ( "潓瑦慷敲䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮硅汰牯牥剜湵前U邐潓瑦慷敲䵜捩潲潳瑦䥜瑮牥敮⁴硅汰牯牥呜灹摥剕獌退䩀㰷뫤ᇏ綿ꨀ椀Software\Microsoft\Internet Explorer\TabbedBrowsing", "Software\Clients", 16 ) 28384 0.0000042 2074 4:55:20.253 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2eba4 ) ERROR_SUCCESS 0.0000198 2075 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2ebac ) ERROR_SUCCESS 0.0000109 2076 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2eba8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 2077 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000064 2078 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2ebac ) ERROR_SUCCESS 0.0000117 2079 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2eba8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2080 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2081 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000053 2082 4:55:20.253 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewScrollOver", FALSE, FALSE ) FALSE 0.0000813 2083 4:55:20.253 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000123 2084 4:55:20.253 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewScrollOver", NULL, 0x00f2ea74, 0x00f2ea78, 0x00f2ea70 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2085 4:55:20.253 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a40 ) ERROR_SUCCESS 0.0000131 2086 4:55:20.253 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "ListviewScrollOver", NULL, 0x00f2ea74, 0x00f2ea78, 0x00f2ea70 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000053 2087 4:55:20.253 AM 2 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2088 4:55:20.253 AM 2 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000053 2089 4:55:20.253 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewWatermark", FALSE, FALSE ) FALSE 0.0000453 2090 4:55:20.253 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000117 2091 4:55:20.253 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewWatermark", NULL, 0x00f2ea74, 0x00f2ea78, 0x00f2ea70 ) ERROR_SUCCESS 0.0000078 2092 4:55:20.253 AM 2 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000059 2093 4:55:20.253 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewAlphaSelect", FALSE, FALSE ) FALSE 0.0000439 2094 4:55:20.253 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000126 2095 4:55:20.253 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewAlphaSelect", NULL, 0x00f2ea74, 0x00f2ea78, 0x00f2ea70 ) ERROR_SUCCESS 0.0000061 2096 4:55:20.253 AM 2 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2097 4:55:20.253 AM 2 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewShadow", FALSE, FALSE ) FALSE 0.0000425 2098 4:55:20.253 AM 2 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000120 2099 4:55:20.253 AM 2 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewShadow", NULL, 0x00f2ea74, 0x00f2ea78, 0x00f2ea70 ) ERROR_SUCCESS 0.0000061 2100 4:55:20.253 AM 2 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2101 4:55:20.253 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2ed08 ) ERROR_SUCCESS 0.0000151 2102 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2ed10 ) ERROR_SUCCESS 0.0000095 2103 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2ed0c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2104 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000064 2105 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2ed10 ) ERROR_SUCCESS 0.0000115 2106 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2ed0c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2107 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2108 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2109 4:55:20.253 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2ead0 ) ERROR_SUCCESS 0.0000154 2110 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2ead8 ) ERROR_SUCCESS 0.0000098 2111 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2ead4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2112 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2113 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2ead8 ) ERROR_SUCCESS 0.0000176 2114 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2ead4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2115 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2116 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000067 2117 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2f088 ) ERROR_SUCCESS 0.0000140 2118 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x000001e8, "Tahoma", NULL, 0x00f2f080, 0x00f2f0e8, 0x00f2f084 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2119 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000053 2120 4:55:20.253 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f28c ) ERROR_SUCCESS 0.0000156 2121 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000101 2122 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2123 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2124 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000109 2125 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000089 2126 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000073 2127 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000073 2128 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2f3b8 ) ERROR_SUCCESS 0.0000198 2129 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x000001e8, "Tahoma", NULL, 0x00f2f3b0, 0x00f2f418, 0x00f2f3b4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2130 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000070 2131 4:55:20.253 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f28c ) ERROR_SUCCESS 0.0000187 2132 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000115 2133 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2134 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000070 2135 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000159 2136 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2137 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000070 2138 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000067 2139 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2f3b8 ) ERROR_SUCCESS 0.0000145 2140 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x000001e8, "Tahoma", NULL, 0x00f2f3b0, 0x00f2f418, 0x00f2f3b4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2141 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000070 2142 4:55:20.253 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f28c ) ERROR_SUCCESS 0.0000184 2143 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000120 2144 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2145 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000067 2146 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000142 2147 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2148 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000070 2149 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000070 2150 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2f3b8 ) ERROR_SUCCESS 0.0000142 2151 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x000001e8, "Tahoma", NULL, 0x00f2f3b0, 0x00f2f418, 0x00f2f3b4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2152 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000070 2153 4:55:20.253 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f28c ) ERROR_SUCCESS 0.0000182 2154 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000117 2155 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000098 2156 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000089 2157 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000226 2158 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2159 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000059 2160 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000059 2161 4:55:20.253 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2f3b8 ) ERROR_SUCCESS 0.0000142 2162 4:55:20.253 AM 2 comctl32.dll RegQueryValueExW ( 0x000001e8, "Tahoma", NULL, 0x00f2f3b0, 0x00f2f418, 0x00f2f3b4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2163 4:55:20.253 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0007713 2164 4:55:20.263 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f28c ) ERROR_SUCCESS 0.0000187 2165 4:55:20.263 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000101 2166 4:55:20.263 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000075 2167 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2168 4:55:20.263 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f294 ) ERROR_SUCCESS 0.0000366 2169 4:55:20.263 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f290 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2170 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2171 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2172 4:55:20.263 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2f3b8 ) ERROR_SUCCESS 0.0000123 2173 4:55:20.263 AM 2 comctl32.dll RegQueryValueExW ( 0x000001e8, "Tahoma", NULL, 0x00f2f3b0, 0x00f2f418, 0x00f2f3b4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2174 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000053 2175 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f4c8 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000050 2176 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f4ac ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2177 4:55:20.263 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2f4ac ) S_OK 0.0000047 2178 4:55:20.263 AM 2 BROWSEUI.dll StrCpyNW ( 0x00f2f168, "The language bar", 256 ) 0x00f2f168 0.0000045 2179 4:55:20.263 AM 2 BROWSEUI.dll StrCpyNW ( 0x000d4b7c, "The language bar", 256 ) 0x000d4b7c 0.0000045 2180 4:55:20.263 AM 2 BROWSEUI.dll SHUnicodeToUnicode ( "The language bar", 0x00f2f3e8, 40 ) 17 0.0000045 2181 4:55:20.263 AM 2 BROWSEUI.dll StrCpyNW ( 0x00f2f168, "", 256 ) 0x00f2f168 0.0000042 2182 4:55:20.263 AM 2 BROWSEUI.dll StrCpyNW ( 0x000d34d4, "", 256 ) 0x000d34d4 0.0000042 2183 4:55:20.263 AM 2 BROWSEUI.dll SHUnicodeToUnicode ( "", 0x00f2f3e8, 40 ) 1 0.0000045 2184 4:55:20.263 AM 2 BROWSEUI.dll StrCpyNW ( 0x00f2f168, "Quick Launch", 256 ) 0x00f2f168 0.0000042 2185 4:55:20.263 AM 2 SHELL32.dll PathCombineW ( 0x00f2eef4, "C:\Documents and Settings\Administrator\Application Data", "Microsoft\Internet Explorer\Quick Launch" ) 0x00f2eef4 0.0000092 2186 4:55:20.263 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x00f2e7f8 ) S_OK 0.0000050 2187 4:55:20.263 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x00f2e7c0 ) S_OK 0.0000279 2188 4:55:20.263 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x00f2e2cc, 260 ) 4 0.0000047 2189 4:55:20.263 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215fb10 0.0000047 2190 4:55:20.263 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x00f2e770 ) S_OK 0.0000045 2191 4:55:20.263 AM 2 SHELL32.dll PathFindExtensionW ( "Internet Explorer" ) 0x00f2e2ca 0.0000045 2192 4:55:20.263 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000092 2193 4:55:20.263 AM 2 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x00f2e860 ) S_OK 0.0000067 2194 4:55:20.263 AM 2 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IPersistFolder3, 0x00f2e084 ) S_OK 0.0000833 2195 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2de3c, "Documents and Settings", 260 ) 0x00f2de3c 0.0000045 2196 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e09e, "Documents and Settings", 257 ) 0x00f2e09e 0.0000042 2197 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2de3c, "Administrator", 260 ) 0x00f2de3c 0.0000045 2198 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e0cc, "Administrator", 234 ) 0x00f2e0cc 0.0000042 2199 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2de3c, "Application Data", 260 ) 0x00f2de3c 0.0000042 2200 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e0e8, "Application Data", 220 ) 0x00f2e0e8 0.0000042 2201 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e10a, "Microsoft", 203 ) 0x00f2e10a 0.0000042 2202 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e11e, "Internet Explorer", 193 ) 0x00f2e11e 0.0000047 2203 4:55:20.263 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer" ) 0x001850c0 0.0000078 2204 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e5a6, "Quick Launch", 175 ) 0x00f2e5a6 0.0000042 2205 4:55:20.263 AM 2 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch", 0x00f2e728 ) S_OK 0.0000084 2206 4:55:20.263 AM 2 SHELL32.dll StrRetToBufW ( 0x00f2e724, 0x02756081, 0x00f2ecec, 260 ) S_OK 0.0000053 2207 4:55:20.263 AM 2 SHELL32.dll PathFindExtensionW ( "Quick Launch" ) 0x00f2e424 0.0000053 2208 4:55:20.263 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000045 2209 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, IBandSite, 0x00f2ea8c ) S_OK 0.0000047 2210 4:55:20.263 AM 2 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x00f2ea18 ) S_OK 0.0000042 2211 4:55:20.263 AM 2 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x00f2e9e0 ) S_OK 0.0000050 2212 4:55:20.263 AM 2 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x00f2e4ec, 260 ) 4 0.0000047 2213 4:55:20.263 AM 2 SHELL32.dll StrDupW ( "C:\" ) 0x0215fb10 0.0000045 2214 4:55:20.263 AM 2 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x00f2e990 ) S_OK 0.0000045 2215 4:55:20.263 AM 2 SHELL32.dll PathFindExtensionW ( "Internet Explorer" ) 0x00f2e4ea 0.0000045 2216 4:55:20.263 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 2217 4:55:20.263 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x00f2ea88 ) S_OK 0.0000042 2218 4:55:20.263 AM 2 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IPersistFolder3, 0x00f2e2a4 ) S_OK 0.0000053 2219 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e05c, "Documents and Settings", 260 ) 0x00f2e05c 0.0000045 2220 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e2be, "Documents and Settings", 257 ) 0x00f2e2be 0.0000045 2221 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e05c, "Administrator", 260 ) 0x00f2e05c 0.0000042 2222 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e2ec, "Administrator", 234 ) 0x00f2e2ec 0.0000042 2223 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e05c, "Application Data", 260 ) 0x00f2e05c 0.0000042 2224 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e308, "Application Data", 220 ) 0x00f2e308 0.0000042 2225 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e32a, "Microsoft", 203 ) 0x00f2e32a 0.0000042 2226 4:55:20.263 AM 2 SHELL32.dll StrCpyNW ( 0x00f2e33e, "Internet Explorer", 193 ) 0x00f2e33e 0.0000042 2227 4:55:20.263 AM 2 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer" ) 0x001850c0 0.0000056 2228 4:55:20.263 AM 2 SHELL32.dll PathRemoveBackslashW ( "C:\Documents and Settings\Administrator\Recent" ) 0x00f2e0ca 0.0000064 2229 4:55:20.263 AM 2 SHELL32.dll PathCommonPrefixW ( "C:\Documents and Settings\Administrator\Recent", "C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer", "姴̡" ) 39 0.0000064 2230 4:55:20.263 AM 2 SHELL32.dll PathFindExtensionW ( "Quick Launch" ) 0x00f2e2a8 0.0000042 2231 4:55:20.263 AM 2 SHELL32.dll StrCmpCW ( "Directory", "Directory" ) 0 0.0000042 2232 4:55:20.263 AM 2 SHELL32.dll SHStrDupW ( "Quick Launch", 0x00f2e948 ) S_OK 0.0000047 2233 4:55:20.263 AM 2 SHELL32.dll StrRetToBufW ( 0x00f2e944, 0x000d1d61, 0x00f2f168, 256 ) S_OK 0.0000045 2234 4:55:20.263 AM 2 BROWSEUI.dll StrCpyNW ( 0x000a7abc, "Quick Launch", 256 ) 0x000a7abc 0.0000042 2235 4:55:20.263 AM 2 BROWSEUI.dll SHUnicodeToUnicode ( "Quick Launch", 0x00f2f3e8, 40 ) 13 0.0000045 2236 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2eefc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2237 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2eee0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2238 4:55:20.263 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2eee0 ) S_OK 0.0000047 2239 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2eefc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2240 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2eee0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2241 4:55:20.263 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2eee0 ) S_OK 0.0000045 2242 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2eefc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2243 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2eee0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2244 4:55:20.263 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2eee0 ) S_OK 0.0000045 2245 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ef58 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2246 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ef3c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2247 4:55:20.263 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ef3c ) S_OK 0.0000045 2248 4:55:20.263 AM 2 BROWSEUI.dll IsOS ( 18 ) TRUE 0.0000045 2249 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, IDeskBarClient, 0x00f2f1c8 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2250 4:55:20.263 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, IDeskBarClient, 0x00f2f1c8 ) S_OK 0.0000047 2251 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ebfc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2252 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ebe0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2253 4:55:20.263 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ebe0 ) S_OK 0.0000045 2254 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ebfc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2255 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ebe0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2256 4:55:20.263 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ebe0 ) S_OK 0.0000045 2257 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ebfc ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000056 2258 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ebe0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000059 2259 4:55:20.263 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ebe0 ) S_OK 0.0000061 2260 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ec58 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2261 4:55:20.263 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ec3c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2262 4:55:20.263 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ec3c ) S_OK 0.0000045 2263 4:55:20.263 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f0d4 ) ERROR_SUCCESS 0.0000288 2264 4:55:20.263 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f0dc ) ERROR_SUCCESS 0.0000123 2265 4:55:20.263 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f0d8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 2266 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000064 2267 4:55:20.263 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f0dc ) ERROR_SUCCESS 0.0000129 2268 4:55:20.263 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f0d8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2269 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2270 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2271 4:55:20.263 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2ec8c ) ERROR_SUCCESS 0.0000162 2272 4:55:20.263 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2ec94 ) ERROR_SUCCESS 0.0000095 2273 4:55:20.263 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2ec90 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2274 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2275 4:55:20.263 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2ec94 ) ERROR_SUCCESS 0.0000117 2276 4:55:20.263 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2ec90 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 2277 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000064 2278 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000059 2279 4:55:20.263 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2ea54 ) ERROR_SUCCESS 0.0000159 2280 4:55:20.263 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2ea5c ) ERROR_SUCCESS 0.0000098 2281 4:55:20.263 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2ea58 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2282 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2283 4:55:20.263 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2ea5c ) ERROR_SUCCESS 0.0000112 2284 4:55:20.263 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2ea58 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2285 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2286 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2287 4:55:20.263 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2eb80 ) ERROR_SUCCESS 0.0000137 2288 4:55:20.263 AM 2 comctl32.dll RegQueryValueExW ( 0x000001e8, "Tahoma", NULL, 0x00f2eb78, 0x00f2ebe0, 0x00f2eb7c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2289 4:55:20.263 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0010610 2290 4:55:20.273 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2edc4 ) ERROR_SUCCESS 0.0000218 2291 4:55:20.273 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2edcc ) ERROR_SUCCESS 0.0000112 2292 4:55:20.273 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2edc8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2293 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2294 4:55:20.273 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2edcc ) ERROR_SUCCESS 0.0000117 2295 4:55:20.273 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2edc8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2296 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2297 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2298 4:55:20.273 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2eb8c ) ERROR_SUCCESS 0.0000142 2299 4:55:20.273 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2eb94 ) ERROR_SUCCESS 0.0000101 2300 4:55:20.273 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2eb90 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2301 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000064 2302 4:55:20.273 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2eb94 ) ERROR_SUCCESS 0.0000123 2303 4:55:20.273 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2eb90 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2304 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2305 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2306 4:55:20.273 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2ecb8 ) ERROR_SUCCESS 0.0000131 2307 4:55:20.273 AM 2 comctl32.dll RegQueryValueExW ( 0x000001e8, "Tahoma", NULL, 0x00f2ecb0, 0x00f2ed18, 0x00f2ecb4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000078 2308 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2309 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2eee0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000047 2310 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2eec4 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2311 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2eec4 ) S_OK 0.0000045 2312 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2eee0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2313 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2eec4 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2314 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2eec4 ) S_OK 0.0000045 2315 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2eee0 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2316 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2eec4 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2317 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2eec4 ) S_OK 0.0000064 2318 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ef3c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2319 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ef20 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2320 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ef20 ) S_OK 0.0000045 2321 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2f004 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2322 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2efe8 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2323 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2efe8 ) S_OK 0.0000042 2324 4:55:20.273 AM 2 BROWSEUI.dll IsOS ( 18 ) TRUE 0.0000045 2325 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, IDeskBarClient, 0x00f2ed04 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2326 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, IDeskBarClient, 0x00f2ed04 ) S_OK 0.0000047 2327 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2e738 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2328 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2e71c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2329 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2e71c ) S_OK 0.0000045 2330 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2e738 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2331 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2e71c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2332 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2e71c ) S_OK 0.0000042 2333 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2e738 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2334 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2e71c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2335 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2e71c ) S_OK 0.0000045 2336 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2e794 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2337 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2e778 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2338 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2e778 ) S_OK 0.0000045 2339 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2efac ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2340 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ef90 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2341 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ef90 ) S_OK 0.0000045 2342 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2efac ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2343 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ef90 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2344 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ef90 ) S_OK 0.0000045 2345 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2efac ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2346 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ef90 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2347 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ef90 ) S_OK 0.0000045 2348 4:55:20.273 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x00030036 ) S_FALSE 0.0000047 2349 4:55:20.273 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x0003003a ) S_FALSE 0.0000042 2350 4:55:20.273 AM 2 comctl32.dll QISearch ( 0x000bf030, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f2d0 ) S_OK 0.0000045 2351 4:55:20.273 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x00030038 ) S_FALSE 0.0000042 2352 4:55:20.273 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x0003003c ) S_FALSE 0.0000042 2353 4:55:20.273 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2f118 ) ERROR_SUCCESS 0.0000190 2354 4:55:20.273 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2f120 ) ERROR_SUCCESS 0.0000101 2355 4:55:20.273 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2f11c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2356 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2357 4:55:20.273 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2f120 ) ERROR_SUCCESS 0.0000120 2358 4:55:20.273 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2f11c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2359 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2360 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2361 4:55:20.273 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x0003003e ) S_FALSE 0.0000045 2362 4:55:20.273 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2ee4c ) ERROR_SUCCESS 0.0000148 2363 4:55:20.273 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2ee54 ) ERROR_SUCCESS 0.0000092 2364 4:55:20.273 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2ee50 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2365 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2366 4:55:20.273 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2ee54 ) ERROR_SUCCESS 0.0000137 2367 4:55:20.273 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2ee50 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2368 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2369 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2370 4:55:20.273 AM 2 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x00f2ec14 ) ERROR_SUCCESS 0.0000151 2371 4:55:20.273 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x00f2ec1c ) ERROR_SUCCESS 0.0000095 2372 4:55:20.273 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x00f2ec18 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2373 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2374 4:55:20.273 AM 2 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x00f2ec1c ) ERROR_SUCCESS 0.0000112 2375 4:55:20.273 AM 2 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x00f2ec18 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2376 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2377 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2378 4:55:20.273 AM 2 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x00f2ed40 ) ERROR_SUCCESS 0.0000126 2379 4:55:20.273 AM 2 comctl32.dll RegQueryValueExW ( 0x000001e8, "Tahoma", NULL, 0x00f2ed38, 0x00f2eda0, 0x00f2ed3c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000095 2380 4:55:20.273 AM 2 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000067 2381 4:55:20.273 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x00030040 ) S_FALSE 0.0000045 2382 4:55:20.273 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x00010058 ) S_OK 0.0000042 2383 4:55:20.273 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x00010066 ) S_OK 0.0000045 2384 4:55:20.273 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x0001005e ) S_OK 0.0000042 2385 4:55:20.273 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x00010062 ) S_OK 0.0000042 2386 4:55:20.273 AM 2 Explorer.EXE SHIsChildOrSelf ( 0x00010058, 0x0001005c ) S_OK 0.0000042 2387 4:55:20.273 AM 2 comctl32.dll QISearch ( 0x000bf030, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f034 ) S_OK 0.0000045 2388 4:55:20.273 AM 2 comctl32.dll QISearch ( 0x000bf030, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f034 ) S_OK 0.0000042 2389 4:55:20.273 AM 2 comctl32.dll QISearch ( 0x000bf030, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f034 ) S_OK 0.0000045 2390 4:55:20.273 AM 2 comctl32.dll QISearch ( 0x000d3c28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2f03c ) S_OK 0.0000042 2391 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ed4c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2392 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ed30 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2393 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ed30 ) S_OK 0.0000045 2394 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ed3c ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2395 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ed20 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2396 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ed20 ) S_OK 0.0000045 2397 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ed94 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000045 2398 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ed78 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2399 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ed78 ) S_OK 0.0000042 2400 4:55:20.273 AM 2 comctl32.dll QISearch ( 0x000acd28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2effc ) S_OK 0.0000042 2401 4:55:20.273 AM 2 comctl32.dll QISearch ( 0x000acd28, 0x774220fc, {46eb5926-582e-4017-9fdf-e8998daa0950}, 0x00f2effc ) S_OK 0.0000042 2402 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {69b3f106-0f04-11d3-ae2e-00c04f8eea99}, 0x00f2ed94 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2403 4:55:20.273 AM 2 Explorer.EXE QISearch ( 0x000c0160, 0x01006288, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ed78 ) E_NOINTERFACE 0x80004002 = No such interface supported 0.0000042 2404 4:55:20.273 AM 2 BROWSEUI.dll QISearch ( 0x000c0ad0, 0x75eb9e18, {ea5f2d61-e008-11cf-99cb-00c04fd64497}, 0x00f2ed78 ) S_OK 0.0000042 2405 4:55:20.273 AM 3 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x0007f8d0 ) ERROR_SUCCESS 0.0000176 2406 4:55:20.273 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x0007f8d8 ) ERROR_SUCCESS 0.0000101 2407 4:55:20.273 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x0007f8d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000073 2408 4:55:20.273 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000081 2409 4:55:20.273 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x0007f8d8 ) ERROR_SUCCESS 0.0000179 2410 4:55:20.273 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x0007f8d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000103 2411 4:55:20.273 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000073 2412 4:55:20.273 AM 3 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000075 2413 4:55:20.313 AM 2 webcheck.dll StrCmpICW ( "潓瑦慷敲䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮硅汰牯牥剜湵前U邐潓瑦慷敲䵜捩潲潳瑦䥜瑮牥敮⁴硅汰牯牥呜灹摥剕獌退䩀㰷뫤ᇏ綿ꨀ椀Software\Microsoft\Internet Explorer\TabbedBrowsing", "policy" ) 28387 0.0000117 2414 4:55:20.313 AM 3 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x0007f8d0 ) ERROR_SUCCESS 0.0000369 2415 4:55:20.313 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x0007f8d8 ) ERROR_SUCCESS 0.0000210 2416 4:55:20.313 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x0007f8d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000106 2417 4:55:20.313 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000061 2418 4:55:20.313 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x0007f8d8 ) ERROR_SUCCESS 0.0000129 2419 4:55:20.313 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x0007f8d4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000081 2420 4:55:20.313 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000061 2421 4:55:20.313 AM 3 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000092 2422 4:55:20.313 AM 3 comctl32.dll RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes", 0, KEY_READ, 0x0007f9fc ) ERROR_SUCCESS 0.0000679 2423 4:55:20.313 AM 3 comctl32.dll RegQueryValueExW ( 0x000001e8, "Tahoma", NULL, 0x0007f9f4, 0x0007fa5c, 0x0007f9f8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 2424 4:55:20.313 AM 3 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000070 2425 4:55:20.313 AM 3 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x0007f3a4 ) ERROR_SUCCESS 0.0000274 2426 4:55:20.313 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x0007f3ac ) ERROR_SUCCESS 0.0000112 2427 4:55:20.313 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x0007f3a8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2428 4:55:20.313 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2429 4:55:20.313 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x0007f3ac ) ERROR_SUCCESS 0.0000115 2430 4:55:20.313 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x0007f3a8 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2431 4:55:20.313 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2432 4:55:20.313 AM 3 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2433 4:55:20.313 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewScrollOver", FALSE, FALSE ) FALSE 0.0000927 2434 4:55:20.313 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000162 2435 4:55:20.313 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewScrollOver", NULL, 0x0007f274, 0x0007f278, 0x0007f270 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000067 2436 4:55:20.313 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a40 ) ERROR_SUCCESS 0.0000137 2437 4:55:20.313 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "ListviewScrollOver", NULL, 0x0007f274, 0x0007f278, 0x0007f270 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000053 2438 4:55:20.313 AM 3 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2439 4:55:20.313 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2440 4:55:20.313 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewWatermark", FALSE, FALSE ) FALSE 0.0000433 2441 4:55:20.313 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000120 2442 4:55:20.313 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewWatermark", NULL, 0x0007f274, 0x0007f278, 0x0007f270 ) ERROR_SUCCESS 0.0000064 2443 4:55:20.313 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000053 2444 4:55:20.313 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewAlphaSelect", FALSE, FALSE ) FALSE 0.0000447 2445 4:55:20.313 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000117 2446 4:55:20.313 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewAlphaSelect", NULL, 0x0007f274, 0x0007f278, 0x0007f270 ) ERROR_SUCCESS 0.0000075 2447 4:55:20.313 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2448 4:55:20.313 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewShadow", FALSE, FALSE ) FALSE 0.0000433 2449 4:55:20.313 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000126 2450 4:55:20.313 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewShadow", NULL, 0x0007f274, 0x0007f278, 0x0007f270 ) ERROR_SUCCESS 0.0000061 2451 4:55:20.313 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000053 2452 4:55:20.313 AM 3 comctl32.dll RegOpenCurrentUser ( KEY_READ, 0x0007f668 ) ERROR_SUCCESS 0.0000159 2453 4:55:20.313 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "Control Panel\Desktop", 0, KEY_READ, 0x0007f670 ) ERROR_SUCCESS 0.0000098 2454 4:55:20.313 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "SmoothScroll", NULL, NULL, 0x774b2d5c, 0x0007f66c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000070 2455 4:55:20.313 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2456 4:55:20.313 AM 3 comctl32.dll RegOpenKeyExW ( 0x000001e8, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_READ, 0x0007f670 ) ERROR_SUCCESS 0.0000112 2457 4:55:20.313 AM 3 comctl32.dll RegQueryValueExW ( 0x00000194, "EnableBalloonTips", NULL, NULL, 0x774b2000, 0x0007f66c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2458 4:55:20.313 AM 3 comctl32.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2459 4:55:20.313 AM 3 comctl32.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000053 2460 4:55:20.313 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewScrollOver", FALSE, FALSE ) FALSE 0.0000802 2461 4:55:20.313 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000131 2462 4:55:20.313 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewScrollOver", NULL, 0x0007f538, 0x0007f53c, 0x0007f534 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2463 4:55:20.313 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a40 ) ERROR_SUCCESS 0.0000123 2464 4:55:20.313 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x00000194, "ListviewScrollOver", NULL, 0x0007f538, 0x0007f53c, 0x0007f534 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000053 2465 4:55:20.313 AM 3 SHLWAPI.dll RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2466 4:55:20.313 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000053 2467 4:55:20.313 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewWatermark", FALSE, FALSE ) FALSE 0.0000425 2468 4:55:20.313 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000117 2469 4:55:20.313 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewWatermark", NULL, 0x0007f538, 0x0007f53c, 0x0007f534 ) ERROR_SUCCESS 0.0000061 2470 4:55:20.313 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000056 2471 4:55:20.313 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewAlphaSelect", FALSE, FALSE ) FALSE 0.0000439 2472 4:55:20.313 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000115 2473 4:55:20.313 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewAlphaSelect", NULL, 0x0007f538, 0x0007f53c, 0x0007f534 ) ERROR_SUCCESS 0.0000073 2474 4:55:20.313 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000059 2475 4:55:20.313 AM 3 comctl32.dll SHRegGetBoolUSValueW ( "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", "ListviewShadow", FALSE, FALSE ) FALSE 0.0000433 2476 4:55:20.313 AM 3 SHLWAPI.dll RegOpenKeyExA ( HKEY_CURRENT_USER, "software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", 0, KEY_QUERY_VALUE, 0x02182a38 ) ERROR_SUCCESS 0.0000129 2477 4:55:20.313 AM 3 SHLWAPI.dll RegQueryValueExW ( 0x000001e8, "ListviewShadow", NULL, 0x0007f538, 0x0007f53c, 0x0007f534 ) ERROR_SUCCESS 0.0000061 2478 4:55:20.313 AM 3 SHLWAPI.dll RegCloseKey ( 0x000001e8 ) ERROR_SUCCESS 0.0000053 2479 4:55:20.384 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb20 ) S_OK 0.0000050 2480 4:55:20.384 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149faf4 ) S_OK 0.0000053 2481 4:55:20.384 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 2482 4:55:20.384 AM 4 SHELL32.dll QISearch ( 0x000c1cb0, 0x7c8d7268, IShellFolder2, 0x0149fa88 ) S_OK 0.0000042 2483 4:55:20.384 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000047 2484 4:55:20.384 AM 4 SHELL32.dll QISearch ( 0x000c6fd0, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000045 2485 4:55:20.384 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000045 2486 4:55:20.384 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa48 ) S_OK 0.0000045 2487 4:55:20.384 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Local Settings" ) -6 0.0000042 2488 4:55:20.384 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa48 ) S_OK 0.0000045 2489 4:55:20.384 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Local Settings" ) 0 0.0000045 2490 4:55:20.384 AM 4 SHELL32.dll QISearch ( 0x000ca228, 0x7c8d7268, IShellFolder2, 0x0149fa18 ) S_OK 0.0000045 2491 4:55:20.384 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "History" ) -7 0.0000047 2492 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb4c ) S_OK 0.0000036 2493 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb20 ) S_OK 0.0000042 2494 4:55:20.394 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 2495 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x000ccd70, 0x7c8d7268, IShellFolder2, 0x0149fab4 ) S_OK 0.0000045 2496 4:55:20.394 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 2497 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x000ccc98, 0x7c8d7268, IShellFolder2, 0x0149faa0 ) S_OK 0.0000042 2498 4:55:20.394 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 2499 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000042 2500 4:55:20.394 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Local Settings" ) -6 0.0000042 2501 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000042 2502 4:55:20.394 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Local Settings" ) 0 0.0000042 2503 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x000cdaf0, 0x7c8d7268, IShellFolder2, 0x0149fa44 ) S_OK 0.0000047 2504 4:55:20.394 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "History" ) -7 0.0000045 2505 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f2f8 ) S_OK 0.0000042 2506 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149f2c0 ) S_OK 0.0000045 2507 4:55:20.394 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149edcc, 260 ) 4 0.0000047 2508 4:55:20.394 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215fb10 0.0000050 2509 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0149f270 ) S_OK 0.0000045 2510 4:55:20.394 AM 4 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\shell", 0, KEY_READ, 0x0149e8b4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000257 2511 4:55:20.394 AM 4 SHELL32.dll StrCpyNW ( 0x0149ee78, "{FF393560-C2A7-11CF-BFF4-444553540000}", 103 ) 0x0149ee78 0.0000045 2512 4:55:20.394 AM 4 SHELL32.dll StrCpyNW ( 0x0149e9c4, "CLSID\", 167 ) 0x0149e9c4 0.0000042 2513 4:55:20.394 AM 4 SHELL32.dll StrCatBuffW ( "CLSID\", "{FF393560-C2A7-11CF-BFF4-444553540000}", 167 ) 0x0149e9c4 0.0000045 2514 4:55:20.394 AM 4 SHELL32.dll StrCatBuffW ( "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}", "\InProcServer32", 167 ) 0x0149e9c4 0.0000053 2515 4:55:20.394 AM 4 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32", 0, KEY_QUERY_VALUE, 0x0149e9c0 ) ERROR_SUCCESS 0.0000232 2516 4:55:20.394 AM 4 SHELL32.dll SHQueryValueExW ( 0x00000196, NULL, NULL, NULL, 0x0149ec70, 0x0149e9b8 ) ERROR_SUCCESS 0.0000335 2517 4:55:20.394 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x00000196, NULL, NULL, 0x0149e860, 0x0149ec70, 0x0149e9b8 ) ERROR_SUCCESS 0.0000243 2518 4:55:20.394 AM 4 SHELL32.dll SHQueryValueExW ( 0x00000196, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000282 2519 4:55:20.394 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x00000196, "LoadWithoutCOM", NULL, 0x0149e860, NULL, 0x0149e840 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2520 4:55:20.394 AM 4 SHELL32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000064 2521 4:55:20.394 AM 4 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\ieframe.dll" ) 0x0149ec98 0.0000045 2522 4:55:20.394 AM 4 SHELL32.dll SHQueryValueExW ( 0x00000340, "{FF393560-C2A7-11CF-BFF4-444553540000}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 2523 4:55:20.394 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x00000340, "{FF393560-C2A7-11CF-BFF4-444553540000}", NULL, 0x0149e9fc, NULL, 0x0149e9dc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 2524 4:55:20.394 AM 4 SHELL32.dll SHQueryValueExW ( 0x00000328, "{FF393560-C2A7-11CF-BFF4-444553540000}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000145 2525 4:55:20.394 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x00000328, "{FF393560-C2A7-11CF-BFF4-444553540000}", NULL, 0x0149e9fc, NULL, 0x0149e9dc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000059 2526 4:55:20.394 AM 4 SHELL32.dll RegQueryValueExW ( 0x00000334, "{FF393560-C2A7-11CF-BFF4-444553540000} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x0149e7b8, 0x0149e7ac, 0x0149e7c0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000411 2527 4:55:20.394 AM 4 SHELL32.dll RegQueryValueExW ( 0x00000330, "{FF393560-C2A7-11CF-BFF4-444553540000} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x0149e7b8, 0x0149e79c, 0x0149e7c0 ) ERROR_SUCCESS 0.0000089 2528 4:55:20.394 AM 4 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0149e410 ) ERROR_SUCCESS 0.0000115 2529 4:55:20.394 AM 4 CLBCatQ.DLL RegQueryValueExW ( 0x00000194, "REGDBVersion", NULL, NULL, 0x0149e48c, 0x0149e40c ) ERROR_SUCCESS 0.0000064 2530 4:55:20.394 AM 4 CLBCatQ.DLL RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000056 2531 4:55:20.394 AM 4 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0149e4b8 ) ERROR_SUCCESS 0.0000101 2532 4:55:20.394 AM 4 CLBCatQ.DLL RegQueryValueExW ( 0x00000194, "REGDBVersion", NULL, NULL, 0x0149e534, 0x0149e4b4 ) ERROR_SUCCESS 0.0000059 2533 4:55:20.394 AM 4 CLBCatQ.DLL RegCloseKey ( 0x00000194 ) ERROR_SUCCESS 0.0000053 2534 4:55:20.394 AM 4 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}", 0, KEY_READ, 0x0149e6b4 ) ERROR_SUCCESS 0.0000190 2535 4:55:20.394 AM 4 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218ad10 ) ERROR_SUCCESS 0.0000123 2536 4:55:20.394 AM 4 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000056 2537 4:55:20.394 AM 4 ole32.dll RegOpenKeyExW ( 0x0000056e, "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}", 0, KEY_READ, 0x0149e780 ) ERROR_SUCCESS 0.0000170 2538 4:55:20.394 AM 4 ole32.dll RegOpenKeyExW ( 0x00000196, "InprocServer32", 0, KEY_READ, 0x0149e71c ) ERROR_SUCCESS 0.0000218 2539 4:55:20.394 AM 4 ole32.dll RegQueryValueExW ( 0x0000077a, "InprocServer32", NULL, 0x0149e728, 0x02194ca0, 0x0149e710 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000187 2540 4:55:20.394 AM 4 ole32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000056 2541 4:55:20.394 AM 4 ole32.dll RegOpenKeyExW ( 0x00000196, "LocalServer32", 0, KEY_READ, 0x0149e73c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000204 2542 4:55:20.394 AM 4 ole32.dll RegOpenKeyExW ( 0x00000196, "InprocServer32", 0, KEY_READ, 0x0149e73c ) ERROR_SUCCESS 0.0000212 2543 4:55:20.394 AM 4 ole32.dll RegQueryValueExW ( 0x0000077a, NULL, NULL, 0x0149e748, 0x02194ca0, 0x0149e730 ) ERROR_SUCCESS 0.0000184 2544 4:55:20.394 AM 4 ole32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000056 2545 4:55:20.394 AM 4 ole32.dll RegOpenKeyExW ( 0x00000196, "InprocHandler32", 0, KEY_READ, 0x0149e73c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000240 2546 4:55:20.394 AM 4 ole32.dll RegOpenKeyExW ( 0x00000196, "LocalServer32", 0, KEY_READ, 0x0149e73c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 2547 4:55:20.394 AM 4 ole32.dll RegOpenKeyExW ( 0x00000196, "LocalServer", 0, KEY_READ, 0x0149e73c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000204 2548 4:55:20.394 AM 4 ole32.dll RegOpenKeyExW ( 0x0000056e, "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}", 0, KEY_READ, 0x0149e6e0 ) ERROR_SUCCESS 0.0000176 2549 4:55:20.394 AM 4 ole32.dll RegQueryValueExW ( 0x0000077a, "AppID", NULL, 0x0149e6b4, 0x0149e6e4, 0x0149e6a4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000182 2550 4:55:20.394 AM 4 ole32.dll RegCloseKey ( 0x0000077a ) ERROR_SUCCESS 0.0000059 2551 4:55:20.394 AM 4 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000053 2552 4:55:20.394 AM 4 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}", 0, KEY_QUERY_VALUE, 0x0149ea14 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000165 2553 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149e49c ) S_OK 0.0000045 2554 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149e464 ) S_OK 0.0000042 2555 4:55:20.394 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149df70, 260 ) 4 0.0000045 2556 4:55:20.394 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215f9a0 0.0000047 2557 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x0149e414 ) S_OK 0.0000042 2558 4:55:20.394 AM 4 SHELL32.dll StrCpyNW ( 0x0149df4c, "Local Settings", 260 ) 0x0149df4c 0.0000045 2559 4:55:20.394 AM 4 SHELL32.dll PathFindExtensionW ( "Local Settings" ) 0x0149df68 0.0000045 2560 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder, 0x0149e500 ) S_OK 0.0000045 2561 4:55:20.394 AM 4 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IPersistFolder3, 0x0149dd28 ) S_OK 0.0000045 2562 4:55:20.394 AM 4 SHELL32.dll StrCpyNW ( 0x0149dae0, "Documents and Settings", 260 ) 0x0149dae0 0.0000042 2563 4:55:20.394 AM 4 SHELL32.dll StrCpyNW ( 0x0149dd42, "Documents and Settings", 257 ) 0x0149dd42 0.0000042 2564 4:55:20.394 AM 4 SHELL32.dll StrCpyNW ( 0x0149dae0, "Administrator", 260 ) 0x0149dae0 0.0000042 2565 4:55:20.394 AM 4 SHELL32.dll StrCpyNW ( 0x0149dd70, "Administrator", 234 ) 0x0149dd70 0.0000042 2566 4:55:20.394 AM 4 SHELL32.dll StrCpyNW ( 0x0149dae0, "Local Settings", 260 ) 0x0149dae0 0.0000042 2567 4:55:20.394 AM 4 SHELL32.dll StrCpyNW ( 0x0149dd8c, "Local Settings", 220 ) 0x0149dd8c 0.0000042 2568 4:55:20.394 AM 4 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Local Settings" ) 0x0219f150 0.0000056 2569 4:55:20.394 AM 4 SHELL32.dll StrCpyNW ( 0x0149dcf4, "History", 260 ) 0x0149dcf4 0.0000042 2570 4:55:20.394 AM 4 SHELL32.dll StrCpyNW ( 0x0149e206, "History", 205 ) 0x0149e206 0.0000042 2571 4:55:20.394 AM 4 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Local Settings\History", 0x0149e3c8 ) S_OK 0.0000050 2572 4:55:20.394 AM 4 SHELL32.dll StrRetToBufW ( 0x0149f224, 0x026901a1, 0x0149f5b4, 260 ) S_OK 0.0000047 2573 4:55:20.394 AM 4 SHELL32.dll SHUnlockShared ( 0x02690010 ) TRUE 0.0000081 2574 4:55:20.394 AM 4 SHELL32.dll SHFreeShared ( 0x000001e8, 1780 ) TRUE 0.0000101 2575 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb20 ) S_OK 0.0000050 2576 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149faf4 ) S_OK 0.0000045 2577 4:55:20.424 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 2578 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000c1cb0, 0x7c8d7268, IShellFolder2, 0x0149fa88 ) S_OK 0.0000045 2579 4:55:20.424 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000047 2580 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000c6fd0, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000045 2581 4:55:20.424 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000050 2582 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa48 ) S_OK 0.0000042 2583 4:55:20.424 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Local Settings" ) -6 0.0000045 2584 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa48 ) S_OK 0.0000045 2585 4:55:20.424 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Local Settings" ) 0 0.0000042 2586 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000ca228, 0x7c8d7268, IShellFolder2, 0x0149fa18 ) S_OK 0.0000042 2587 4:55:20.424 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "History" ) -7 0.0000042 2588 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb4c ) S_OK 0.0000042 2589 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb20 ) S_OK 0.0000045 2590 4:55:20.424 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 2591 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000ccd70, 0x7c8d7268, IShellFolder2, 0x0149fab4 ) S_OK 0.0000047 2592 4:55:20.424 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 2593 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000ccc98, 0x7c8d7268, IShellFolder2, 0x0149faa0 ) S_OK 0.0000045 2594 4:55:20.424 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000045 2595 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000045 2596 4:55:20.424 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Local Settings" ) -6 0.0000042 2597 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000045 2598 4:55:20.424 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Local Settings" ) 0 0.0000042 2599 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000cdaf0, 0x7c8d7268, IShellFolder2, 0x0149fa44 ) S_OK 0.0000042 2600 4:55:20.424 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "History" ) -7 0.0000042 2601 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f2f8 ) S_OK 0.0000045 2602 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149f2c0 ) S_OK 0.0000047 2603 4:55:20.424 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149edcc, 260 ) 4 0.0000050 2604 4:55:20.424 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215fb10 0.0000050 2605 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0149f270 ) S_OK 0.0000045 2606 4:55:20.424 AM 4 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\shell", 0, KEY_READ, 0x0149e8b4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000257 2607 4:55:20.424 AM 4 SHELL32.dll StrCpyNW ( 0x0149ee78, "{FF393560-C2A7-11CF-BFF4-444553540000}", 103 ) 0x0149ee78 0.0000042 2608 4:55:20.424 AM 4 SHELL32.dll StrCpyNW ( 0x0149e9c4, "CLSID\", 167 ) 0x0149e9c4 0.0000042 2609 4:55:20.424 AM 4 SHELL32.dll StrCatBuffW ( "CLSID\", "{FF393560-C2A7-11CF-BFF4-444553540000}", 167 ) 0x0149e9c4 0.0000047 2610 4:55:20.424 AM 4 SHELL32.dll StrCatBuffW ( "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}", "\InProcServer32", 167 ) 0x0149e9c4 0.0000045 2611 4:55:20.424 AM 4 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32", 0, KEY_QUERY_VALUE, 0x0149e9c0 ) ERROR_SUCCESS 0.0000215 2612 4:55:20.424 AM 4 SHELL32.dll SHQueryValueExW ( 0x00000196, NULL, NULL, NULL, 0x0149ec70, 0x0149e9b8 ) ERROR_SUCCESS 0.0000358 2613 4:55:20.424 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x00000196, NULL, NULL, 0x0149e860, 0x0149ec70, 0x0149e9b8 ) ERROR_SUCCESS 0.0000265 2614 4:55:20.424 AM 4 SHELL32.dll SHQueryValueExW ( 0x00000196, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000285 2615 4:55:20.424 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x00000196, "LoadWithoutCOM", NULL, 0x0149e860, NULL, 0x0149e840 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2616 4:55:20.424 AM 4 SHELL32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000064 2617 4:55:20.424 AM 4 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\ieframe.dll" ) 0x0149ec98 0.0000045 2618 4:55:20.424 AM 4 SHELL32.dll SHQueryValueExW ( 0x00000340, "{FF393560-C2A7-11CF-BFF4-444553540000}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000140 2619 4:55:20.424 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x00000340, "{FF393560-C2A7-11CF-BFF4-444553540000}", NULL, 0x0149e9fc, NULL, 0x0149e9dc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 2620 4:55:20.424 AM 4 SHELL32.dll SHQueryValueExW ( 0x00000328, "{FF393560-C2A7-11CF-BFF4-444553540000}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000140 2621 4:55:20.424 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x00000328, "{FF393560-C2A7-11CF-BFF4-444553540000}", NULL, 0x0149e9fc, NULL, 0x0149e9dc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000056 2622 4:55:20.424 AM 4 SHELL32.dll RegQueryValueExW ( 0x00000334, "{FF393560-C2A7-11CF-BFF4-444553540000} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x0149e7b8, 0x0149e7ac, 0x0149e7c0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000084 2623 4:55:20.424 AM 4 SHELL32.dll RegQueryValueExW ( 0x00000330, "{FF393560-C2A7-11CF-BFF4-444553540000} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x0149e7b8, 0x0149e79c, 0x0149e7c0 ) ERROR_SUCCESS 0.0000087 2624 4:55:20.424 AM 4 ole32.dll RegNotifyChangeKeyValue ( 0x000000e8, TRUE, REG_NOTIFY_CHANGE_LAST_SET | REG_NOTIFY_CHANGE_NAME, 0x000000ec, TRUE ) ERROR_SUCCESS 0.0000103 2625 4:55:20.424 AM 4 ole32.dll RegCloseKey ( 0x0000056e ) ERROR_SUCCESS 0.0000081 2626 4:55:20.424 AM 4 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000061 2627 4:55:20.424 AM 4 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0149e410 ) ERROR_SUCCESS 0.0000117 2628 4:55:20.424 AM 4 CLBCatQ.DLL RegQueryValueExW ( 0x00000754, "REGDBVersion", NULL, NULL, 0x0149e48c, 0x0149e40c ) ERROR_SUCCESS 0.0000067 2629 4:55:20.424 AM 4 CLBCatQ.DLL RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000053 2630 4:55:20.424 AM 4 CLBCatQ.DLL RegOpenKeyExW ( HKEY_LOCAL_MACHINE, "Software\Microsoft\COM3", 0, KEY_READ | KEY_WOW64_64KEY, 0x0149e4b8 ) ERROR_SUCCESS 0.0000101 2631 4:55:20.424 AM 4 CLBCatQ.DLL RegQueryValueExW ( 0x00000754, "REGDBVersion", NULL, NULL, 0x0149e534, 0x0149e4b4 ) ERROR_SUCCESS 0.0000059 2632 4:55:20.424 AM 4 CLBCatQ.DLL RegCloseKey ( 0x00000754 ) ERROR_SUCCESS 0.0000053 2633 4:55:20.424 AM 4 ole32.dll RegOpenKeyExW ( 0x000000d2, "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}", 0, KEY_READ, 0x0149e6b4 ) ERROR_SUCCESS 0.0000193 2634 4:55:20.424 AM 4 ole32.dll RegOpenKeyExW ( 0x000000d2, NULL, 0, KEY_READ, 0x0218a148 ) ERROR_SUCCESS 0.0000123 2635 4:55:20.424 AM 4 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000056 2636 4:55:20.424 AM 4 ole32.dll RegOpenKeyExW ( 0x0000056e, "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}", 0, KEY_READ, 0x0149e780 ) ERROR_SUCCESS 0.0000168 2637 4:55:20.424 AM 4 ole32.dll RegOpenKeyExW ( 0x00000756, "InprocServer32", 0, KEY_READ, 0x0149e71c ) ERROR_SUCCESS 0.0000215 2638 4:55:20.424 AM 4 ole32.dll RegQueryValueExW ( 0x00000196, "InprocServer32", NULL, 0x0149e728, 0x02194ca0, 0x0149e710 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000190 2639 4:55:20.424 AM 4 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000056 2640 4:55:20.424 AM 4 ole32.dll RegOpenKeyExW ( 0x00000756, "LocalServer32", 0, KEY_READ, 0x0149e73c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 2641 4:55:20.424 AM 4 ole32.dll RegOpenKeyExW ( 0x00000756, "InprocServer32", 0, KEY_READ, 0x0149e73c ) ERROR_SUCCESS 0.0000212 2642 4:55:20.424 AM 4 ole32.dll RegQueryValueExW ( 0x00000196, NULL, NULL, 0x0149e748, 0x02194ca0, 0x0149e730 ) ERROR_SUCCESS 0.0000182 2643 4:55:20.424 AM 4 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000056 2644 4:55:20.424 AM 4 ole32.dll RegOpenKeyExW ( 0x00000756, "InprocHandler32", 0, KEY_READ, 0x0149e73c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000201 2645 4:55:20.424 AM 4 ole32.dll RegOpenKeyExW ( 0x00000756, "LocalServer32", 0, KEY_READ, 0x0149e73c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000193 2646 4:55:20.424 AM 4 ole32.dll RegOpenKeyExW ( 0x00000756, "LocalServer", 0, KEY_READ, 0x0149e73c ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000207 2647 4:55:20.424 AM 4 ole32.dll RegOpenKeyExW ( 0x0000056e, "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}", 0, KEY_READ, 0x0149e6e0 ) ERROR_SUCCESS 0.0000176 2648 4:55:20.424 AM 4 ole32.dll RegQueryValueExW ( 0x00000196, "AppID", NULL, 0x0149e6b4, 0x0149e6e4, 0x0149e6a4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000179 2649 4:55:20.424 AM 4 ole32.dll RegCloseKey ( 0x00000196 ) ERROR_SUCCESS 0.0000059 2650 4:55:20.424 AM 4 ole32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000056 2651 4:55:20.424 AM 4 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}", 0, KEY_QUERY_VALUE, 0x0149ea14 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000162 2652 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149e49c ) S_OK 0.0000045 2653 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149e464 ) S_OK 0.0000042 2654 4:55:20.424 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149df70, 260 ) 4 0.0000045 2655 4:55:20.424 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215f9a0 0.0000047 2656 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder, 0x0149e414 ) S_OK 0.0000045 2657 4:55:20.424 AM 4 SHELL32.dll StrCpyNW ( 0x0149df4c, "Local Settings", 260 ) 0x0149df4c 0.0000042 2658 4:55:20.424 AM 4 SHELL32.dll PathFindExtensionW ( "Local Settings" ) 0x0149df68 0.0000073 2659 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x0149e500 ) S_OK 0.0000045 2660 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IPersistFolder3, 0x0149dd28 ) S_OK 0.0000045 2661 4:55:20.424 AM 4 SHELL32.dll StrCpyNW ( 0x0149dae0, "Documents and Settings", 260 ) 0x0149dae0 0.0000042 2662 4:55:20.424 AM 4 SHELL32.dll StrCpyNW ( 0x0149dd42, "Documents and Settings", 257 ) 0x0149dd42 0.0000045 2663 4:55:20.424 AM 4 SHELL32.dll StrCpyNW ( 0x0149dae0, "Administrator", 260 ) 0x0149dae0 0.0000042 2664 4:55:20.424 AM 4 SHELL32.dll StrCpyNW ( 0x0149dd70, "Administrator", 234 ) 0x0149dd70 0.0000045 2665 4:55:20.424 AM 4 SHELL32.dll StrCpyNW ( 0x0149dae0, "Local Settings", 260 ) 0x0149dae0 0.0000042 2666 4:55:20.424 AM 4 SHELL32.dll StrCpyNW ( 0x0149dd8c, "Local Settings", 220 ) 0x0149dd8c 0.0000042 2667 4:55:20.424 AM 4 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Local Settings" ) 0x0219f150 0.0000056 2668 4:55:20.424 AM 4 SHELL32.dll StrCpyNW ( 0x0149dcf4, "History", 260 ) 0x0149dcf4 0.0000042 2669 4:55:20.424 AM 4 SHELL32.dll StrCpyNW ( 0x0149e206, "History", 205 ) 0x0149e206 0.0000042 2670 4:55:20.424 AM 4 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Local Settings\History", 0x0149e3c8 ) S_OK 0.0000050 2671 4:55:20.424 AM 4 SHELL32.dll StrRetToBufW ( 0x0149f224, 0x026901a1, 0x0149f5b4, 260 ) S_OK 0.0000053 2672 4:55:20.424 AM 4 SHELL32.dll SHUnlockShared ( 0x02690010 ) TRUE 0.0000081 2673 4:55:20.424 AM 4 SHELL32.dll SHFreeShared ( 0x000001e8, 1780 ) TRUE 0.0000112 2674 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb20 ) S_OK 0.0000050 2675 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149faf4 ) S_OK 0.0000045 2676 4:55:20.424 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000059 2677 4:55:20.424 AM 4 SHELL32.dll QISearch ( 0x000c1cb0, 0x7c8d7268, IShellFolder2, 0x0149fa88 ) S_OK 0.0000047 2678 4:55:20.434 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000126 2679 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x000c6fd0, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000073 2680 4:55:20.434 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000061 2681 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa48 ) S_OK 0.0000059 2682 4:55:20.434 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Local Settings" ) -6 0.0000064 2683 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa48 ) S_OK 0.0000050 2684 4:55:20.434 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Local Settings" ) 0 0.0000045 2685 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x000ca228, 0x7c8d7268, IShellFolder2, 0x0149fa18 ) S_OK 0.0000045 2686 4:55:20.434 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "History" ) -7 0.0000042 2687 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb4c ) S_OK 0.0000053 2688 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149fb20 ) S_OK 0.0000070 2689 4:55:20.434 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000067 2690 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x000ccd70, 0x7c8d7268, IShellFolder2, 0x0149fab4 ) S_OK 0.0000047 2691 4:55:20.434 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 2692 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x000ccc98, 0x7c8d7268, IShellFolder2, 0x0149faa0 ) S_OK 0.0000045 2693 4:55:20.434 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 2694 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000045 2695 4:55:20.434 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Local Settings" ) -6 0.0000042 2696 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x000cd7b8, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000056 2697 4:55:20.434 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Local Settings" ) 0 0.0000045 2698 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x000cdaf0, 0x7c8d7268, IShellFolder2, 0x0149fa44 ) S_OK 0.0000042 2699 4:55:20.434 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "History" ) -7 0.0000042 2700 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149f2f8 ) S_OK 0.0000042 2701 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149f2c0 ) S_OK 0.0000042 2702 4:55:20.434 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149edcc, 260 ) 4 0.0000050 2703 4:55:20.434 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215fb10 0.0000053 2704 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x021722a8, 0x7c8d7268, IShellFolder, 0x0149f270 ) S_OK 0.0000042 2705 4:55:20.434 AM 4 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\shell", 0, KEY_READ, 0x0149e8b4 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000355 2706 4:55:20.434 AM 4 SHELL32.dll StrCpyNW ( 0x0149ee78, "{FF393560-C2A7-11CF-BFF4-444553540000}", 103 ) 0x0149ee78 0.0000045 2707 4:55:20.434 AM 4 SHELL32.dll StrCpyNW ( 0x0149e9c4, "CLSID\", 167 ) 0x0149e9c4 0.0000050 2708 4:55:20.434 AM 4 SHELL32.dll StrCatBuffW ( "CLSID\", "{FF393560-C2A7-11CF-BFF4-444553540000}", 167 ) 0x0149e9c4 0.0000045 2709 4:55:20.434 AM 4 SHELL32.dll StrCatBuffW ( "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}", "\InProcServer32", 167 ) 0x0149e9c4 0.0000047 2710 4:55:20.434 AM 4 SHELL32.dll RegOpenKeyExW ( HKEY_CLASSES_ROOT, "CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32", 0, KEY_QUERY_VALUE, 0x0149e9c0 ) ERROR_SUCCESS 0.0000274 2711 4:55:20.434 AM 4 SHELL32.dll SHQueryValueExW ( 0x00000756, NULL, NULL, NULL, 0x0149ec70, 0x0149e9b8 ) ERROR_SUCCESS 0.0000372 2712 4:55:20.434 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x00000756, NULL, NULL, 0x0149e860, 0x0149ec70, 0x0149e9b8 ) ERROR_SUCCESS 0.0000277 2713 4:55:20.434 AM 4 SHELL32.dll SHQueryValueExW ( 0x00000756, "LoadWithoutCOM", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000279 2714 4:55:20.434 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x00000756, "LoadWithoutCOM", NULL, 0x0149e860, NULL, 0x0149e840 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000196 2715 4:55:20.434 AM 4 SHELL32.dll RegCloseKey ( 0x00000756 ) ERROR_SUCCESS 0.0000067 2716 4:55:20.434 AM 4 SHELL32.dll PathFindFileNameW ( "C:\WINDOWS\system32\ieframe.dll" ) 0x0149ec98 0.0000047 2717 4:55:20.434 AM 4 SHELL32.dll SHQueryValueExW ( 0x00000340, "{FF393560-C2A7-11CF-BFF4-444553540000}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000148 2718 4:55:20.434 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x00000340, "{FF393560-C2A7-11CF-BFF4-444553540000}", NULL, 0x0149e9fc, NULL, 0x0149e9dc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000061 2719 4:55:20.434 AM 4 SHELL32.dll SHQueryValueExW ( 0x00000328, "{FF393560-C2A7-11CF-BFF4-444553540000}", NULL, NULL, NULL, NULL ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000154 2720 4:55:20.434 AM 4 SHLWAPI.dll RegQueryValueExW ( 0x00000328, "{FF393560-C2A7-11CF-BFF4-444553540000}", NULL, 0x0149e9fc, NULL, 0x0149e9dc ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000064 2721 4:55:20.434 AM 4 SHELL32.dll RegQueryValueExW ( 0x00000334, "{FF393560-C2A7-11CF-BFF4-444553540000} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x0149e7b8, 0x0149e7ac, 0x0149e7c0 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000087 2722 4:55:20.434 AM 4 SHELL32.dll RegQueryValueExW ( 0x00000330, "{FF393560-C2A7-11CF-BFF4-444553540000} {000214E6-0000-0000-C000-000000000046} 0x401", NULL, 0x0149e7b8, 0x0149e79c, 0x0149e7c0 ) ERROR_SUCCESS 0.0000089 2723 4:55:20.434 AM 4 SHLWAPI.dll RegOpenKeyExA ( HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}", 0, KEY_QUERY_VALUE, 0x0149ea14 ) ERROR_FILE_NOT_FOUND 2 = The system cannot find the file specified. 0.0000176 2724 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder, 0x0149e49c ) S_OK 0.0000045 2725 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder, 0x0149e464 ) S_OK 0.0000042 2726 4:55:20.434 AM 4 SHELL32.dll SHAnsiToUnicode ( "C:\", 0x0149df70, 260 ) 4 0.0000047 2727 4:55:20.434 AM 4 SHELL32.dll StrDupW ( "C:\" ) 0x0215f9a0 0.0000047 2728 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x02173388, 0x7c8d7268, IShellFolder, 0x0149e414 ) S_OK 0.0000045 2729 4:55:20.434 AM 4 SHELL32.dll StrCpyNW ( 0x0149df4c, "Local Settings", 260 ) 0x0149df4c 0.0000045 2730 4:55:20.434 AM 4 SHELL32.dll PathFindExtensionW ( "Local Settings" ) 0x0149df68 0.0000050 2731 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IShellFolder, 0x0149e500 ) S_OK 0.0000045 2732 4:55:20.434 AM 4 SHELL32.dll QISearch ( 0x021720f8, 0x7c8d7268, IPersistFolder3, 0x0149dd28 ) S_OK 0.0000045 2733 4:55:20.434 AM 4 SHELL32.dll StrCpyNW ( 0x0149dae0, "Documents and Settings", 260 ) 0x0149dae0 0.0000045 2734 4:55:20.434 AM 4 SHELL32.dll StrCpyNW ( 0x0149dd42, "Documents and Settings", 257 ) 0x0149dd42 0.0000042 2735 4:55:20.434 AM 4 SHELL32.dll StrCpyNW ( 0x0149dae0, "Administrator", 260 ) 0x0149dae0 0.0000042 2736 4:55:20.434 AM 4 SHELL32.dll StrCpyNW ( 0x0149dd70, "Administrator", 234 ) 0x0149dd70 0.0000045 2737 4:55:20.434 AM 4 SHELL32.dll StrCpyNW ( 0x0149dae0, "Local Settings", 260 ) 0x0149dae0 0.0000042 2738 4:55:20.434 AM 4 SHELL32.dll StrCpyNW ( 0x0149dd8c, "Local Settings", 220 ) 0x0149dd8c 0.0000045 2739 4:55:20.434 AM 4 SHELL32.dll StrDupW ( "C:\Documents and Settings\Administrator\Local Settings" ) 0x0219f150 0.0000056 2740 4:55:20.434 AM 4 SHELL32.dll StrCpyNW ( 0x0149dcf4, "History", 260 ) 0x0149dcf4 0.0000045 2741 4:55:20.434 AM 4 SHELL32.dll StrCpyNW ( 0x0149e206, "History", 205 ) 0x0149e206 0.0000042 2742 4:55:20.434 AM 4 SHELL32.dll SHStrDupW ( "C:\Documents and Settings\Administrator\Local Settings\History", 0x0149e3c8 ) S_OK 0.0000050 2743 4:55:20.434 AM 4 SHELL32.dll StrRetToBufW ( 0x0149f224, 0x026901a1, 0x0149f5b4, 260 ) S_OK 0.0000045 2744 4:55:20.434 AM 4 SHELL32.dll SHUnlockShared ( 0x02690010 ) TRUE 0.0000101 2745 4:55:20.434 AM 4 SHELL32.dll SHFreeShared ( 0x000001e8, 1780 ) TRUE 0.0000123 2746 4:55:20.444 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb20 ) S_OK 0.0000053 2747 4:55:20.444 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149faf4 ) S_OK 0.0000045 2748 4:55:20.444 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 2749 4:55:20.444 AM 4 SHELL32.dll QISearch ( 0x000c1cb0, 0x7c8d7268, IShellFolder2, 0x0149fa88 ) S_OK 0.0000042 2750 4:55:20.444 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 2751 4:55:20.444 AM 4 SHELL32.dll QISearch ( 0x000c6fd0, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000045 2752 4:55:20.444 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000045 2753 4:55:20.444 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa48 ) S_OK 0.0000045 2754 4:55:20.444 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Local Settings" ) -6 0.0000042 2755 4:55:20.444 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa48 ) S_OK 0.0000047 2756 4:55:20.444 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Local Settings" ) 0 0.0000045 2757 4:55:20.444 AM 4 SHELL32.dll QISearch ( 0x000ca228, 0x7c8d7268, IShellFolder2, 0x0149fa18 ) S_OK 0.0000042 2758 4:55:20.444 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "History" ) -7 0.0000042 2759 4:55:20.444 AM 4 SHELL32.dll SHUnlockShared ( 0x02690010 ) TRUE 0.0000075 2760 4:55:20.444 AM 4 SHELL32.dll SHFreeShared ( 0x000001e8, 1780 ) TRUE 0.0000101 2761 4:55:20.444 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb20 ) S_OK 0.0000047 2762 4:55:20.444 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149faf4 ) S_OK 0.0000042 2763 4:55:20.444 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000050 2764 4:55:20.444 AM 4 SHELL32.dll QISearch ( 0x000c1cb0, 0x7c8d7268, IShellFolder2, 0x0149fa88 ) S_OK 0.0000045 2765 4:55:20.444 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 2766 4:55:20.444 AM 4 SHELL32.dll QISearch ( 0x000c6fd0, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000045 2767 4:55:20.444 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0008037 2768 4:55:20.454 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa48 ) S_OK 0.0000045 2769 4:55:20.454 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Local Settings" ) -6 0.0000042 2770 4:55:20.454 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa48 ) S_OK 0.0000042 2771 4:55:20.454 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Local Settings" ) 0 0.0000042 2772 4:55:20.454 AM 4 SHELL32.dll QISearch ( 0x000ca228, 0x7c8d7268, IShellFolder2, 0x0149fa18 ) S_OK 0.0000045 2773 4:55:20.454 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "History" ) -7 0.0000042 2774 4:55:20.454 AM 4 SHELL32.dll SHUnlockShared ( 0x02690010 ) TRUE 0.0000075 2775 4:55:20.454 AM 4 SHELL32.dll SHFreeShared ( 0x000001e8, 1780 ) TRUE 0.0000106 2776 4:55:20.454 AM 4 SHELL32.dll QISearch ( 0x0009cdb0, 0x7c8d7074, IShellFolder2, 0x0149fb20 ) S_OK 0.0000050 2777 4:55:20.454 AM 4 SHELL32.dll QISearch ( 0x000c1318, 0x7c8d7074, IShellFolder2, 0x0149faf4 ) S_OK 0.0000045 2778 4:55:20.454 AM 4 SHELL32.dll StrCmpICA ( "C:\", "C:\" ) 0 0.0000042 2779 4:55:20.454 AM 4 SHELL32.dll QISearch ( 0x000c1cb0, 0x7c8d7268, IShellFolder2, 0x0149fa88 ) S_OK 0.0000042 2780 4:55:20.454 AM 4 SHELL32.dll StrCmpICW ( "Documents and Settings", "Documents and Settings" ) 0 0.0000045 2781 4:55:20.454 AM 4 SHELL32.dll QISearch ( 0x000c6fd0, 0x7c8d7268, IShellFolder2, 0x0149fa74 ) S_OK 0.0000042 2782 4:55:20.454 AM 4 SHELL32.dll StrCmpICW ( "Administrator", "Administrator" ) 0 0.0000042 2783 4:55:20.454 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa48 ) S_OK 0.0000045 2784 4:55:20.454 AM 4 SHELL32.dll StrCmpICW ( "Favorites", "Local Settings" ) -6 0.0000045 2785 4:55:20.454 AM 4 SHELL32.dll QISearch ( 0x000c7568, 0x7c8d7268, IShellFolder2, 0x0149fa48 ) S_OK 0.0000045 2786 4:55:20.454 AM 4 SHELL32.dll StrCmpICW ( "Local Settings", "Local Settings" ) 0 0.0000042 2787 4:55:20.454 AM 4 SHELL32.dll QISearch ( 0x000ca228, 0x7c8d7268, IShellFolder2, 0x0149fa18 ) S_OK 0.0000042 2788 4:55:20.454 AM 4 SHELL32.dll StrCmpICW ( "Application Data", "History" ) -7 0.0000042 2789 4:55:20.454 AM 4 SHELL32.dll SHUnlockShared ( 0x02690010 ) TRUE 0.0000073 2790 4:55:20.454 AM 4 SHELL32.dll SHFreeShared ( 0x000001e8, 1780 ) TRUE 0.0000092 2791 4:55:20.454 AM 4 SHELL32.dll SHUnlockShared ( 0x02690010 ) TRUE 0.0000075 2792 4:55:20.454 AM 4 SHELL32.dll SHFreeShared ( 0x000001e8, 1780 ) TRUE 0.0000089