Module API Return Value Error Duration cmd.exe GetCurrentDirectoryW ( 260, 0x4ad34400 ) 46 0.0000022 cmd.exe GetCurrentDirectoryW ( 260, 0x0012fc14 ) 46 0.0000020 cmd.exe GetFullPathNameW ( "C:\Documents and Settings\Julen Urizar\Desktop", 259, 0x0012fc14, 0x0012f800 ) 46 0.0000031 cmd.exe GetFileAttributesW ( "C:\Documents and Settings\Julen Urizar\Desktop" ) FILE_ATTRIBUTE_DIRECTORY 0.0000212 cmd.exe FindFirstFileW ( "C:\Documents and Settings", 0x0012f58c ) 0x00143ed8 0.0000285 cmd.exe FindClose ( 0x00143ed8 ) TRUE 0.0000087 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar", 0x0012f58c ) 0x00143ed8 0.0000159 cmd.exe FindClose ( 0x00143ed8 ) TRUE 0.0000053 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop", 0x0012f58c ) 0x00143ed8 0.0000151 cmd.exe FindClose ( 0x00143ed8 ) TRUE 0.0000047 cmd.exe GetFileAttributesW ( "C:\Documents and Settings\Julen Urizar\Desktop" ) FILE_ATTRIBUTE_DIRECTORY 0.0000070 cmd.exe SetCurrentDirectoryW ( "C:\Documents and Settings\Julen Urizar\Desktop" ) TRUE 0.0000028 cmd.exe GetCurrentDirectoryW ( 260, 0x4ad34400 ) 46 0.0000020 cmd.exe GetFileAttributesW ( ""C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat"" ) INVALID_FILE_ATTRIBUTES 123 = The filename, directory name, or volume label syntax is incorrect. 0.0000131 cmd.exe GetFullPathNameW ( "C:\Documents and Settings\Julen Urizar\Desktop\.", 520, 0x0014d398, 0x0012f9e8 ) 46 0.0000028 cmd.exe GetDriveTypeW ( "C:\" ) DRIVE_FIXED 0.0000042 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", 0x0012f78c ) 0x00143ed8 0.0000168 cmd.exe FindClose ( 0x00143ed8 ) TRUE 0.0000056 cmd.exe GetFullPathNameW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", 260, 0x0014d0e8, 0x0012fb54 ) 54 0.0000028 ADVAPI32.dll CreateFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", GENERIC_READ, FILE_SHARE_READ, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL ) 0x00000060 0.0000263 ADVAPI32.dll GetLongPathNameW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", 0x0012f398, 260 ) 54 0.0000500 ADVAPI32.dll GetFileSizeEx ( 0x00000060, 0x0012faac ) TRUE 0.0000034 cmd.exe CreateFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", GENERIC_READ, FILE_SHARE_READ | FILE_SHARE_WRITE, 0x0012fb90, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL ) 0x00000060 0.0000117 msvcrt.dll GetFileType ( 0x00000060 ) FILE_TYPE_DISK 0.0000025 cmd.exe SetFilePointer ( 0x00000060, 0, NULL, FILE_BEGIN ) 0 0.0000025 cmd.exe SetFilePointer ( 0x00000060, 0, NULL, FILE_CURRENT ) 0 0.0000028 cmd.exe ReadFile ( 0x00000060, 0x4ad290a0, 8192, 0x0012fb7c, NULL ) TRUE 0.0000274 cmd.exe SetFilePointer ( 0x00000060, 0, NULL, FILE_CURRENT ) 3 0.0000022 cmd.exe ReadFile ( 0x00000060, 0x4ad290a0, 8192, 0x0012fb64, NULL ) TRUE 0.0000031 cmd.exe GetFileType ( 0x00000060 ) FILE_TYPE_DISK 0.0000022 cmd.exe SetFilePointer ( 0x00000060, 0, NULL, FILE_END ) 3 0.0000031 msvcrt.dll SetFilePointer ( 0x00000060, 0, NULL, FILE_CURRENT ) 3 0.0000025 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0014290 cmd.exe GetCurrentDirectoryW ( 260, 0x4ad34400 ) 46 0.0000045 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000095 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000073 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000064 cmd.exe GetFullPathNameW ( ".", 520, 0x0014eb68, 0x0012f98c ) 46 0.0000042 cmd.exe GetDriveTypeW ( "C:\" ) DRIVE_FIXED 0.0000036 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.*", 0x0012f714 ) 0x00143ed8 0.0000388 cmd.exe FindClose ( 0x00143ed8 ) TRUE 0.0000087 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.COM", 0x0012f714 ) INVALID_HANDLE_VALUE 2 = The system cannot find the file specified. 0.0000159 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.EXE", 0x0012f714 ) INVALID_HANDLE_VALUE 2 = The system cannot find the file specified. 0.0000134 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.BAT", 0x0012f714 ) 0x00143ed8 0.0000117 cmd.exe FindClose ( 0x00143ed8 ) TRUE 0.0000050 cmd.exe GetFullPathNameW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", 260, 0x0014d0e8, 0x0012fb2c ) 54 0.0000028 ADVAPI32.dll CreateFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", GENERIC_READ, FILE_SHARE_READ, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL ) 0x00000064 0.0000131 ADVAPI32.dll GetLongPathNameW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", 0x0012f370, 260 ) 54 0.0000360 ADVAPI32.dll GetFileSizeEx ( 0x00000064, 0x0012fa84 ) TRUE 0.0000028 cmd.exe CreateFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", GENERIC_READ, FILE_SHARE_READ | FILE_SHARE_WRITE, 0x0012fb90, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL ) 0x00000064 0.0000095 msvcrt.dll GetFileType ( 0x00000064 ) FILE_TYPE_DISK 0.0000025 cmd.exe SetFilePointer ( 0x00000064, 0, NULL, FILE_BEGIN ) 0 0.0000025 cmd.exe SetFilePointer ( 0x00000064, 0, NULL, FILE_CURRENT ) 0 0.0000028 cmd.exe ReadFile ( 0x00000064, 0x4ad290a0, 8192, 0x0012fb7c, NULL ) TRUE 0.0000064 cmd.exe SetFilePointer ( 0x00000064, 0, NULL, FILE_CURRENT ) 3 0.0000025 cmd.exe ReadFile ( 0x00000064, 0x4ad290a0, 8192, 0x0012fb64, NULL ) TRUE 0.0000031 cmd.exe GetFileType ( 0x00000064 ) FILE_TYPE_DISK 0.0000022 cmd.exe SetFilePointer ( 0x00000064, 0, NULL, FILE_END ) 3 0.0000031 msvcrt.dll SetFilePointer ( 0x00000064, 0, NULL, FILE_CURRENT ) 3 0.0000025 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000092 cmd.exe GetCurrentDirectoryW ( 260, 0x4ad34400 ) 46 0.0000022 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000050 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000056 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000050 cmd.exe GetFullPathNameW ( ".", 520, 0x0014ef58, 0x0012f98c ) 46 0.0000042 cmd.exe GetDriveTypeW ( "C:\" ) DRIVE_FIXED 0.0000042 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.*", 0x0012f714 ) 0x00143ed8 0.0000282 cmd.exe FindClose ( 0x00143ed8 ) TRUE 0.0000061 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.COM", 0x0012f714 ) INVALID_HANDLE_VALUE 2 = The system cannot find the file specified. 0.0000156 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.EXE", 0x0012f714 ) INVALID_HANDLE_VALUE 2 = The system cannot find the file specified. 0.0000126 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.BAT", 0x0012f714 ) 0x00143ed8 0.0000115 cmd.exe FindClose ( 0x00143ed8 ) TRUE 0.0000045 cmd.exe GetFullPathNameW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", 260, 0x0014d0e8, 0x0012fb2c ) 54 0.0000028 ADVAPI32.dll CreateFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", GENERIC_READ, FILE_SHARE_READ, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL ) 0x00000060 0.0000207 ADVAPI32.dll GetLongPathNameW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", 0x0012f370, 260 ) 54 0.0000855 ADVAPI32.dll GetFileSizeEx ( 0x00000060, 0x0012fa84 ) TRUE 0.0000031 cmd.exe CreateFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", GENERIC_READ, FILE_SHARE_READ | FILE_SHARE_WRITE, 0x0012fb90, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL ) 0x00000060 0.0000101 msvcrt.dll GetFileType ( 0x00000060 ) FILE_TYPE_DISK 0.0000025 cmd.exe SetFilePointer ( 0x00000060, 0, NULL, FILE_BEGIN ) 0 0.0000028 cmd.exe SetFilePointer ( 0x00000060, 0, NULL, FILE_CURRENT ) 0 0.0000025 cmd.exe ReadFile ( 0x00000060, 0x4ad290a0, 8192, 0x0012fb7c, NULL ) TRUE 0.0000056 cmd.exe SetFilePointer ( 0x00000060, 0, NULL, FILE_CURRENT ) 3 0.0000022 cmd.exe ReadFile ( 0x00000060, 0x4ad290a0, 8192, 0x0012fb64, NULL ) TRUE 0.0000031 cmd.exe GetFileType ( 0x00000060 ) FILE_TYPE_DISK 0.0000025 cmd.exe SetFilePointer ( 0x00000060, 0, NULL, FILE_END ) 3 0.0000031 msvcrt.dll SetFilePointer ( 0x00000060, 0, NULL, FILE_CURRENT ) 3 0.0000022 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000092 cmd.exe GetCurrentDirectoryW ( 260, 0x4ad34400 ) 46 0.0000022 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000050 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000056 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000050 cmd.exe GetFullPathNameW ( ".", 520, 0x0014f1a8, 0x0012f98c ) 46 0.0000034 cmd.exe GetDriveTypeW ( "C:\" ) DRIVE_FIXED 0.0000031 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.*", 0x0012f714 ) 0x00143ed8 0.0000184 cmd.exe FindClose ( 0x00143ed8 ) TRUE 0.0000050 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.COM", 0x0012f714 ) INVALID_HANDLE_VALUE 2 = The system cannot find the file specified. 0.0000134 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.EXE", 0x0012f714 ) INVALID_HANDLE_VALUE 2 = The system cannot find the file specified. 0.0000123 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.BAT", 0x0012f714 ) 0x00143ed8 0.0000115 cmd.exe FindClose ( 0x00143ed8 ) TRUE 0.0000047 cmd.exe GetFullPathNameW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", 260, 0x0014d0e8, 0x0012fb2c ) 54 0.0000034 ADVAPI32.dll CreateFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", GENERIC_READ, FILE_SHARE_READ, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL ) 0x00000064 0.0001383 ADVAPI32.dll GetLongPathNameW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", 0x0012f370, 260 ) 54 0.0000732 ADVAPI32.dll GetFileSizeEx ( 0x00000064, 0x0012fa84 ) TRUE 0.0000034 cmd.exe CreateFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.bat", GENERIC_READ, FILE_SHARE_READ | FILE_SHARE_WRITE, 0x0012fb90, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL ) 0x00000064 0.0000112 msvcrt.dll GetFileType ( 0x00000064 ) FILE_TYPE_DISK 0.0000025 cmd.exe SetFilePointer ( 0x00000064, 0, NULL, FILE_BEGIN ) 0 0.0000025 cmd.exe SetFilePointer ( 0x00000064, 0, NULL, FILE_CURRENT ) 0 0.0000025 cmd.exe ReadFile ( 0x00000064, 0x4ad290a0, 8192, 0x0012fb7c, NULL ) TRUE 0.0000053 cmd.exe SetFilePointer ( 0x00000064, 0, NULL, FILE_CURRENT ) 3 0.0000022 cmd.exe ReadFile ( 0x00000064, 0x4ad290a0, 8192, 0x0012fb64, NULL ) TRUE 0.0000028 cmd.exe GetFileType ( 0x00000064 ) FILE_TYPE_DISK 0.0000022 cmd.exe SetFilePointer ( 0x00000064, 0, NULL, FILE_END ) 3 0.0000028 msvcrt.dll SetFilePointer ( 0x00000064, 0, NULL, FILE_CURRENT ) 3 0.0000025 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000084 cmd.exe GetCurrentDirectoryW ( 260, 0x4ad34400 ) 46 0.0000022 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000047 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000050 cmd.exe GetFileType ( 0x00000007 ) FILE_TYPE_CHAR 0.0000047 cmd.exe GetFullPathNameW ( ".", 520, 0x0014f3f8, 0x0012f98c ) 46 0.0000031 cmd.exe GetDriveTypeW ( "C:\" ) DRIVE_FIXED 0.0000028 cmd.exe FindFirstFileW ( "C:\Documents and Settings\Julen Urizar\Desktop\cmd.*", 0x0012f714 ) 0x00143ed8 0.0000176 cmd.exe FindClose ( 0x00143ed8 ) TRUE 0.0000053