Dokumen RKT

CreateDirectory: "C:\Program Files (x86)\Garena Plus" created
Call: 996
File: overwriteflag=1, allowskipfilesflag=2,

name="C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\gginst.dll"
File: skipped: "C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\gginst.dll" (overwriteflag=1)
Delete: "C:\Program Files (x86)\Garena Plus\data"
Delete: "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe"
Delete: "C:\Program Files (x86)\Garena Plus\GaVoice.exe"
Delete: "C:\Program Files (x86)\Garena Plus\ggcode.dll"
Delete: "C:\Program Files (x86)\Garena Plus\ggdownloader.dll"
Delete: "C:\Program Files (x86)\Garena Plus\PluginAdminExec.exe"
Delete: "C:\Program Files (x86)\Garena Plus\UpdateEx.exe"
Delete: "C:\Program Files (x86)\Garena Plus\VersionModule.dll"
Delete: "C:\Program Files (x86)\Garena Plus\config.ini"
RMDir: "C:\Program Files (x86)\Garena Plus\lib"
RMDir: "C:\Program Files (x86)\Garena Plus\Plugins"
RMDir: "C:\Program Files (x86)\Garena Plus\Sound"
RMDir: "C:\Program Files (x86)\Garena Plus\theme"
RMDir: "C:\Program Files (x86)\Garena Plus\restore"
RMDir: "C:\Program Files (x86)\Garena Plus\restore_"
RMDir: "C:\Program Files (x86)\Garena Plus\bbtalk"
Call: 996

name="C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\System.dll"
File: wrote 11264 to "C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\System.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore" (0)

CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore" created
CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore_\280352469" (0)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore_" created
CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore_\280352469" created
Rename: C:\Program Files (x86)\Garena Plus\ggspawn.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\ggspawn.dll
Rename failed: C:\Program Files (x86)\Garena Plus\ggspawn.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\ggspawn.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\bbtalk_ggspawn.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\ggspawn.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\ggdllhost.exe->C:\Program Files (x86)\Garena

Plus\restore_\280352469\ggdllhost.exe
Rename failed: C:\Program Files (x86)\Garena Plus\ggdllhost.exe->C:\Program Files (x86)\Garena



Rename: C:\Program Files (x86)\Garena Plus\gamehook.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\gamehook.dll
Rename failed: C:\Program Files (x86)\Garena Plus\gamehook.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\gagmhook.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\gagmhook.dll
Rename failed: C:\Program Files (x86)\Garena Plus\gagmhook.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\ggcode.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\ggcode.dll
Rename failed: C:\Program Files (x86)\Garena Plus\ggcode.dll->C:\Program Files (x86)\Garena
Rename: C:\Program Files (x86)\Garena Plus\bbtalk\CommonLib.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\CommonLib.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\CommonLib.dll->C:\Program Files

(x86)\Garena Plus\restore_\280352469\CommonLib.dll
Rename: C:\Program Files (x86)\Garena Plus\bbtalk\Overlay.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\Overlay.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\Overlay.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\PluginKernel.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\PluginKernel.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\PluginKernel.dll->C:\Program Files

(x86)\Garena Plus\restore_\280352469\PluginKernel.dll
Rename: C:\Program Files (x86)\Garena Plus\bbtalk\HookAPI.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\HookAPI.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\HookAPI.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayHookD3D8.dll->C:\Program Files

(x86)\Garena Plus\restore_\280352469\OverlayHookD3D8.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayHookD3D8.dll->C:\Program Files



Rename: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayHookDInput8.dll->C:\Program Files

(x86)\Garena Plus\restore_\280352469\OverlayHookDInput8.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayHookDInput8.dll->C:\Program Files

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayUI.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\OverlayUI.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayUI.dll->C:\Program Files (x86)\Garena


Rename: C:\Program Files (x86)\Garena Plus\bbtalk\InputHook.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\InputHook.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\InputHook.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\x86\audiohook.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\audiohook.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\x86\audiohook.dll->C:\Program Files

(x86)\Garena Plus\restore_\280352469\audiohook.dll
Rename: C:\Program Files (x86)\Garena Plus\bbtalk\x86\audiohost.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\audiohost.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\x86\audiohost.dll->C:\Program Files

(x86)\Garena Plus\restore_\280352469\audiohost.dll
Rename: C:\Program Files (x86)\Garena Plus\bbtalk\x86\EasyHook32.dll->C:\Program Files

(x86)\Garena Plus\restore_\280352469\EasyHook32.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\x86\EasyHook32.dll->C:\Program Files

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\x86\libzmq.dll->C:\Program Files (x86)\Garena

Plus\restore_\280352469\libzmq.dll
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\x86\libzmq.dll->C:\Program Files

(x86)\Garena Plus\restore_\280352469\libzmq.dll



Rename: C:\Program Files (x86)\Garena Plus\bbtalk\x64\hookhelper.exe->C:\Program Files

(x86)\Garena Plus\restore_\280352469\hookhelper.exe
Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\x64\hookhelper.exe->C:\Program Files



Rename: C:\Program Files (x86)\Garena Plus\bbtalk\audiohost.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\audiohost.dll->C:\Program Files (x86)\Garena

File: overwriteflag=0, allowskipfilesflag=2, name="7za.dll"
File: wrote 275456 to "C:\Program Files (x86)\Garena Plus\7za.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="CommonLib.dll"
File: wrote 117240 to "C:\Program Files (x86)\Garena Plus\CommonLib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="CxImage.dll"
File: wrote 500176 to "C:\Program Files (x86)\Garena Plus\CxImage.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="DibModule.dll"
File: wrote 46544 to "C:\Program Files (x86)\Garena Plus\DibModule.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="FileLoader.dll"
File: wrote 63992 to "C:\Program Files (x86)\Garena Plus\FileLoader.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="GaTransfer.exe"
File: wrote 1157584 to "C:\Program Files (x86)\Garena Plus\GaTransfer.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="GaVoice.exe"
File: wrote 198608 to "C:\Program Files (x86)\Garena Plus\GaVoice.exe"

File: overwriteflag=0, allowskipfilesflag=2, name="GarenaMessenger.exe"
File: wrote 9140688 to "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="HookAPI.dll"
File: wrote 69584 to "C:\Program Files (x86)\Garena Plus\HookAPI.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="HookPolicy.dll"
File: wrote 49104 to "C:\Program Files (x86)\Garena Plus\HookPolicy.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="HookSocket.dll"
File: wrote 46544 to "C:\Program Files (x86)\Garena Plus\HookSocket.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="ImageModule.dll"
File: wrote 205304 to "C:\Program Files (x86)\Garena Plus\ImageModule.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Inject.dll"
File: wrote 72184 to "C:\Program Files (x86)\Garena Plus\Inject.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="MD5.dll"
File: wrote 71168 to "C:\Program Files (x86)\Garena Plus\MD5.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="PluginAdminExec.exe"
File: wrote 261624 to "C:\Program Files (x86)\Garena Plus\PluginAdminExec.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="PluginKernel.dll"
File: wrote 100304 to "C:\Program Files (x86)\Garena Plus\PluginKernel.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="PluginModule.dll"
File: wrote 38352 to "C:\Program Files (x86)\Garena Plus\PluginModule.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="ServerMemAlloc.dll"
File: wrote 39376 to "C:\Program Files (x86)\Garena Plus\ServerMemAlloc.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="UpdateEx.exe"
File: wrote 723448 to "C:\Program Files (x86)\Garena Plus\UpdateEx.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="UpdateManager.exe"

File: wrote 1689080 to "C:\Program Files (x86)\Garena Plus\UpdateManager.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="VersionModule.dll"
File: wrote 47096 to "C:\Program Files (x86)\Garena Plus\VersionModule.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Zip7Module.dll"
File: wrote 50128 to "C:\Program Files (x86)\Garena Plus\Zip7Module.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="data"
File: wrote 4073561 to "C:\Program Files (x86)\Garena Plus\data"
File: overwriteflag=0, allowskipfilesflag=2, name="ggdllhost.exe"
File: wrote 175096 to "C:\Program Files (x86)\Garena Plus\ggdllhost.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="ggdownloader.dll"
File: wrote 4893136 to "C:\Program Files (x86)\Garena Plus\ggdownloader.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="ggspawn.dll"
File: wrote 3402744 to "C:\Program Files (x86)\Garena Plus\ggspawn.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gxxmsg.exe"
File: wrote 399864 to "C:\Program Files (x86)\Garena Plus\gxxmsg.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="lame_enc.dll"
File: wrote 162304 to "C:\Program Files (x86)\Garena Plus\lame_enc.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libcaptor.dll"
File: wrote 827896 to "C:\Program Files (x86)\Garena Plus\libcaptor.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libcurl.dll"
File: wrote 228864 to "C:\Program Files (x86)\Garena Plus\libcurl.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libeay32.dll"
File: wrote 1097216 to "C:\Program Files (x86)\Garena Plus\libeay32.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libmpg123.dll"
File: wrote 168400 to "C:\Program Files (x86)\Garena Plus\libmpg123.dll"

File: overwriteflag=0, allowskipfilesflag=2, name="libzmq.dll"
File: wrote 153088 to "C:\Program Files (x86)\Garena Plus\libzmq.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="log4cxx.dll"
File: wrote 1739264 to "C:\Program Files (x86)\Garena Plus\log4cxx.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="resdata"
File: wrote 8796729 to "C:\Program Files (x86)\Garena Plus\resdata"
File: overwriteflag=0, allowskipfilesflag=2, name="sqlite3.dll"
File: wrote 573100 to "C:\Program Files (x86)\Garena Plus\sqlite3.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="ssleay32.dll"
File: wrote 238080 to "C:\Program Files (x86)\Garena Plus\ssleay32.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="umdata"
File: wrote 143230 to "C:\Program Files (x86)\Garena Plus\umdata"
File: overwriteflag=0, allowskipfilesflag=2, name="zlib1.dll"
File: wrote 100352 to "C:\Program Files (x86)\Garena Plus\zlib1.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Plugins" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Plugins" created
File: overwriteflag=0, allowskipfilesflag=2, name="BBTalk"
File: wrote 345279 to "C:\Program Files (x86)\Garena Plus\Plugins\BBTalk"
File: overwriteflag=0, allowskipfilesflag=2, name="GameSale"
File: wrote 607918 to "C:\Program Files (x86)\Garena Plus\Plugins\GameSale"
File: overwriteflag=0, allowskipfilesflag=2, name="GameSalePlugin.dll"
File: wrote 238032 to "C:\Program Files (x86)\Garena Plus\Plugins\GameSalePlugin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="GarenaTalkPlugin.dll"
File: wrote 411088 to "C:\Program Files (x86)\Garena Plus\Plugins\GarenaTalkPlugin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="News"

File: wrote 197074 to "C:\Program Files (x86)\Garena Plus\Plugins\News"
File: overwriteflag=0, allowskipfilesflag=2, name="Platform"
File: wrote 62488 to "C:\Program Files (x86)\Garena Plus\Plugins\Platform"
File: overwriteflag=0, allowskipfilesflag=2, name="PlatformPlugin.dll"
File: wrote 114128 to "C:\Program Files (x86)\Garena Plus\Plugins\PlatformPlugin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="PluginNews.dll"
File: wrote 242216 to "C:\Program Files (x86)\Garena Plus\Plugins\PluginNews.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Stats"
File: wrote 40606 to "C:\Program Files (x86)\Garena Plus\Plugins\Stats"
File: overwriteflag=0, allowskipfilesflag=2, name="StatsPlugin.dll"
File: wrote 238544 to "C:\Program Files (x86)\Garena Plus\Plugins\StatsPlugin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="ggplugin.dll"
File: wrote 2216488 to "C:\Program Files (x86)\Garena Plus\Plugins\ggplugin.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room" created
File: overwriteflag=0, allowskipfilesflag=2, name="AESocket.dll"
File: wrote 176128 to "C:\Program Files (x86)\Garena Plus\Room\AESocket.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="AutoUpdate.exe"
File: wrote 702976 to "C:\Program Files (x86)\Garena Plus\Room\AutoUpdate.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="AutoUpdate2.exe"
File: wrote 695808 to "C:\Program Files (x86)\Garena Plus\Room\AutoUpdate2.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="CS15Hook.dll"
File: wrote 222720 to "C:\Program Files (x86)\Garena Plus\Room\CS15Hook.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="CrashSender.exe"
File: wrote 374784 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender.exe"

File: overwriteflag=0, allowskipfilesflag=2, name="Gamecn.dat"
File: wrote 19456 to "C:\Program Files (x86)\Garena Plus\Room\Gamecn.dat"
File: overwriteflag=0, allowskipfilesflag=2, name="Gameen.dat"
File: wrote 23552 to "C:\Program Files (x86)\Garena Plus\Room\Gameen.dat"
File: overwriteflag=0, allowskipfilesflag=2, name="Gametw.dat"
File: wrote 19456 to "C:\Program Files (x86)\Garena Plus\Room\Gametw.dat"
File: overwriteflag=0, allowskipfilesflag=2, name="Gamevn.dat"
File: wrote 22528 to "C:\Program Files (x86)\Garena Plus\Room\Gamevn.dat"
File: wrote 54784 to "C:\Program Files (x86)\Garena Plus\Room\Inject.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="L4DSocket.dll"
File: wrote 113664 to "C:\Program Files (x86)\Garena Plus\Room\L4DSocket.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Roomcn.dat"
File: wrote 194560 to "C:\Program Files (x86)\Garena Plus\Room\Roomcn.dat"
File: overwriteflag=0, allowskipfilesflag=2, name="Roomen.dat"
File: wrote 195584 to "C:\Program Files (x86)\Garena Plus\Room\Roomen.dat"
File: overwriteflag=0, allowskipfilesflag=2, name="Roomtw.dat"
File: wrote 198656 to "C:\Program Files (x86)\Garena Plus\Room\Roomtw.dat"
File: overwriteflag=0, allowskipfilesflag=2, name="SocketHook.dll"
File: wrote 89600 to "C:\Program Files (x86)\Garena Plus\Room\SocketHook.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="WC3J.dll"
File: wrote 43008 to "C:\Program Files (x86)\Garena Plus\Room\WC3J.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="War3Hook.dll"
File: wrote 100352 to "C:\Program Files (x86)\Garena Plus\Room\War3Hook.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="XMLSkin.dll"

File: wrote 404480 to "C:\Program Files (x86)\Garena Plus\Room\XMLSkin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="changelog.garena_room.txt"
File: wrote 4257 to "C:\Program Files (x86)\Garena Plus\Room\changelog.garena_room.txt"
File: overwriteflag=0, allowskipfilesflag=2, name="dbghelp.dll"
File: wrote 1080656 to "C:\Program Files (x86)\Garena Plus\Room\dbghelp.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="garena_room.dat"
File: wrote 40 to "C:\Program Files (x86)\Garena Plus\Room\garena_room.dat"
File: overwriteflag=0, allowskipfilesflag=2, name="garena_room.exe"
File: wrote 4256856 to "C:\Program Files (x86)\Garena Plus\Room\garena_room.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="gcaclientdll.dll"
File: wrote 70144 to "C:\Program Files (x86)\Garena Plus\Room\gcaclientdll.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="ggsec.dll"
File: wrote 277784 to "C:\Program Files (x86)\Garena Plus\Room\ggsec.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="riched20.dll"
File: wrote 456704 to "C:\Program Files (x86)\Garena Plus\Room\riched20.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="safeapi.dll"
File: wrote 202336 to "C:\Program Files (x86)\Garena Plus\Room\safeapi.dll"
File: wrote 526848 to "C:\Program Files (x86)\Garena Plus\Room\sqlite3.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="update.dat"
File: wrote 2509 to "C:\Program Files (x86)\Garena Plus\Room\update.dat"
File: overwriteflag=0, allowskipfilesflag=2, name="user.xml"
File: wrote 149 to "C:\Program Files (x86)\Garena Plus\Room\user.xml"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\AutoUpdate" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\AutoUpdate" created

CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\AutoUpdate\Skin" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\AutoUpdate\Skin" created
File: overwriteflag=0, allowskipfilesflag=2, name="Skin.ggz"
File: wrote 91468 to "C:\Program Files (x86)\Garena Plus\Room\AutoUpdate\Skin\Skin.ggz"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\CrashSender" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\CrashSender" created
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages" created
File: overwriteflag=0, allowskipfilesflag=2, name="br.xml"
File: wrote 1070 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\br.xml"
File: overwriteflag=0, allowskipfilesflag=2, name="cn.xml"
File: wrote 1026 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\cn.xml"
File: overwriteflag=0, allowskipfilesflag=2, name="kr.xml"
File: wrote 1107 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\kr.xml"
File: overwriteflag=0, allowskipfilesflag=2, name="kz.xml"
File: wrote 1349 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\kz.xml"
File: overwriteflag=0, allowskipfilesflag=2, name="ru.xml"
File: wrote 1478 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\ru.xml"
File: overwriteflag=0, allowskipfilesflag=2, name="sp.xml"
File: wrote 1066 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\sp.xml"
File: overwriteflag=0, allowskipfilesflag=2, name="tw.xml"
File: wrote 1002 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\tw.xml"
File: overwriteflag=0, allowskipfilesflag=2, name="vn.xml"
File: wrote 1164 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\vn.xml"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\Languages" (1)

CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\Languages" created
File: wrote 12767 to "C:\Program Files (x86)\Garena Plus\Room\Languages\cn.xml"
File: overwriteflag=0, allowskipfilesflag=2, name="en.xml"
File: wrote 62 to "C:\Program Files (x86)\Garena Plus\Room\Languages\en.xml"
File: wrote 19740 to "C:\Program Files (x86)\Garena Plus\Room\Languages\ru.xml"
File: wrote 15375 to "C:\Program Files (x86)\Garena Plus\Room\Languages\tw.xml"
File: overwriteflag=0, allowskipfilesflag=2, name="ua.xml"
File: wrote 20315 to "C:\Program Files (x86)\Garena Plus\Room\Languages\ua.xml"
File: wrote 14445 to "C:\Program Files (x86)\Garena Plus\Room\Languages\vn.xml"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\Skin" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\Skin" created
File: wrote 3192022 to "C:\Program Files (x86)\Garena Plus\Room\Skin\Skin.ggz"
File: overwriteflag=0, allowskipfilesflag=2, name="games.xml"
File: wrote 4976 to "C:\Program Files (x86)\Garena Plus\Room\Skin\games.xml"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\SkinRU" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\SkinRU" created
File: wrote 3190404 to "C:\Program Files (x86)\Garena Plus\Room\SkinRU\Skin.ggz"
File: wrote 4976 to "C:\Program Files (x86)\Garena Plus\Room\SkinRU\games.xml"

CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\SkinTW" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\SkinTW" created
File: wrote 3187997 to "C:\Program Files (x86)\Garena Plus\Room\SkinTW\Skin.ggz"
File: wrote 4976 to "C:\Program Files (x86)\Garena Plus\Room\SkinTW\games.xml"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\sound" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\sound" created
File: overwriteflag=0, allowskipfilesflag=2, name="game.wav"
File: wrote 61292 to "C:\Program Files (x86)\Garena Plus\Room\sound\game.wav"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Sound" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Sound" created
File: overwriteflag=0, allowskipfilesflag=2, name="Audio.wav"
File: wrote 7476 to "C:\Program Files (x86)\Garena Plus\Sound\Audio.wav"
File: overwriteflag=0, allowskipfilesflag=2, name="Nudge.wav"
File: wrote 198188 to "C:\Program Files (x86)\Garena Plus\Sound\Nudge.wav"
File: overwriteflag=0, allowskipfilesflag=2, name="msg.wav"
File: wrote 75242 to "C:\Program Files (x86)\Garena Plus\Sound\msg.wav"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk" created
File: overwriteflag=0, allowskipfilesflag=2, name="BBTalk.exe"
File: wrote 7340536 to "C:\Program Files (x86)\Garena Plus\bbtalk\BBTalk.exe"
File: wrote 116728 to "C:\Program Files (x86)\Garena Plus\bbtalk\CommonLib.dll"

File: wrote 46032 to "C:\Program Files (x86)\Garena Plus\bbtalk\DibModule.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="FileSystem.dll"
File: wrote 66000 to "C:\Program Files (x86)\Garena Plus\bbtalk\FileSystem.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="GarenaTalkLoader.exe"
File: wrote 268240 to "C:\Program Files (x86)\Garena Plus\bbtalk\GarenaTalkLoader.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="GarenaTalkOverlay.exe"
File: wrote 97784 to "C:\Program Files (x86)\Garena Plus\bbtalk\GarenaTalkOverlay.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="GarenaTalkWeb.dll"
File: wrote 107512 to "C:\Program Files (x86)\Garena Plus\bbtalk\GarenaTalkWeb.dll"
File: wrote 394744 to "C:\Program Files (x86)\Garena Plus\bbtalk\ImageModule.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="InputHook.dll"
File: wrote 79352 to "C:\Program Files (x86)\Garena Plus\bbtalk\InputHook.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="JpegModule.dll"
File: wrote 118264 to "C:\Program Files (x86)\Garena Plus\bbtalk\JpegModule.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="LogLib.dll"
File: wrote 29136 to "C:\Program Files (x86)\Garena Plus\bbtalk\LogLib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="LogLibEx.dll"
File: wrote 73208 to "C:\Program Files (x86)\Garena Plus\bbtalk\LogLibEx.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Overlay.dll"
File: wrote 2498552 to "C:\Program Files (x86)\Garena Plus\bbtalk\Overlay.dll"
File: wrote 76240 to "C:\Program Files (x86)\Garena Plus\bbtalk\PluginKernel.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="PngModule.dll"
File: wrote 112080 to "C:\Program Files (x86)\Garena Plus\bbtalk\PngModule.dll"

File: wrote 39376 to "C:\Program Files (x86)\Garena Plus\bbtalk\ServerMemAlloc.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Update.exe"
File: wrote 333264 to "C:\Program Files (x86)\Garena Plus\bbtalk\Update.exe"
File: wrote 35792 to "C:\Program Files (x86)\Garena Plus\bbtalk\VersionModule.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="audiohost.dll"
File: wrote 101928 to "C:\Program Files (x86)\Garena Plus\bbtalk\audiohost.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gagmhook.dll"
File: wrote 829944 to "C:\Program Files (x86)\Garena Plus\bbtalk\gagmhook.dll"
File: wrote 61944 to "C:\Program Files (x86)\Garena Plus\bbtalk\ggdllhost.exe"
File: wrote 802808 to "C:\Program Files (x86)\Garena Plus\bbtalk\ggspawn.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gtalk.version"
File: wrote 10 to "C:\Program Files (x86)\Garena Plus\bbtalk\gtalk.version"
File: wrote 1116152 to "C:\Program Files (x86)\Garena Plus\bbtalk\libeay32.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libmp3lame.dll"
File: wrote 251344 to "C:\Program Files (x86)\Garena Plus\bbtalk\libmp3lame.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="lollauncher.dll"
File: wrote 53752 to "C:\Program Files (x86)\Garena Plus\bbtalk\lollauncher.dll"
File: wrote 460648 to "C:\Program Files (x86)\Garena Plus\bbtalk\sqlite3.dll"

File: wrote 257488 to "C:\Program Files (x86)\Garena Plus\bbtalk\ssleay32.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\lib" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\lib" created
File: overwriteflag=0, allowskipfilesflag=2, name="AudioMixerLib.dll"
File: wrote 121336 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\AudioMixerLib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="ChannelUrlDll.dll"
File: wrote 42024 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\ChannelUrlDll.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="FileManager.dll"
File: wrote 90064 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\FileManager.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Http.dll"
File: wrote 387024 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\Http.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="IPCLib.dll"
File: wrote 54264 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\IPCLib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="InputHookLib.dll"
File: wrote 59856 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\InputHookLib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="LangLib.dll"
File: wrote 67624 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\LangLib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="MP3Saver.dll"
File: wrote 43000 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\MP3Saver.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="MediaEngine.dll"
File: wrote 2807248 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\MediaEngine.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="MessagePumpLib.dll"
File: wrote 147448 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\MessagePumpLib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="RealTimeVideoEngine.dll"
File: wrote 1060344 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\RealTimeVideoEngine.dll"

File: overwriteflag=0, allowskipfilesflag=2, name="ResLib.dll"
File: wrote 69112 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\ResLib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="TcpClient.dll"
File: wrote 140280 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\TcpClient.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="UILayout.dll"
File: wrote 123384 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\UILayout.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="UILib.dll"
File: wrote 879056 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\UILib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="UdpClient.dll"
File: wrote 150480 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\UdpClient.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="XmlUIModule.dll"
File: wrote 68560 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\XmlUIModule.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="exchndl.dll"
File: wrote 437712 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\exchndl.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins" created
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook" created
File: wrote 69112 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\HookAPI.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="OverlayHookD3D10.dll"
File: wrote 305616 to "C:\Program Files (x86)\Garena

Plus\bbtalk\plugins\D3DHook\OverlayHookD3D10.dll"



File: overwriteflag=0, allowskipfilesflag=2, name="OverlayHookDInput8.dll"

Plus\bbtalk\plugins\D3DHook\OverlayHookDInput8.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="OverlayUI.dll"
File: wrote 643624 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\OverlayUI.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="hookpolicy.xml"
File: wrote 768 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\hookpolicy.xml"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource" created
File: overwriteflag=0, allowskipfilesflag=2, name="app"
File: wrote 62215 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource\app"
File: overwriteflag=0, allowskipfilesflag=2, name="ui"
File: wrote 65307 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource\ui"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource\fx" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource\fx" created
File: overwriteflag=0, allowskipfilesflag=2, name="render.fx"

Plus\bbtalk\plugins\D3DHook\resource\fx\render.fx"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook" created
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x64" (1)

CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x64" created
File: overwriteflag=0, allowskipfilesflag=2, name="audiohook.dll"

Plus\bbtalk\plugins\audiohook\x64\audiohook.dll"
File: wrote 246224 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x64\audiohost.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="audioproxy.exe"

Plus\bbtalk\plugins\audiohook\x64\audioproxy.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="hookhelper.exe"

Plus\bbtalk\plugins\audiohook\x64\hookhelper.exe"



CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin" created
File: overwriteflag=0, allowskipfilesflag=2, name="npGarenaTalkPlugin.dll"

Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer" created
File: overwriteflag=0, allowskipfilesflag=2, name="bg_tex.png"
File: wrote 91089 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\bg_tex.png"
File: overwriteflag=0, allowskipfilesflag=2, name="dell_logo.png"
File: wrote 8039 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\dell_logo.png"
File: overwriteflag=0, allowskipfilesflag=2, name="loading.png"
File: wrote 422 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\loading.png"
File: overwriteflag=0, allowskipfilesflag=2, name="pause.png"
File: wrote 1538 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\pause.png"
File: overwriteflag=0, allowskipfilesflag=2, name="talktalk_player_plugin.exe"

Plus\bbtalk\plugins\ttplayer\talktalk_player_plugin.exe"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\resource" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\resource" created
File: wrote 2611475 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\app"
File: overwriteflag=0, allowskipfilesflag=2, name="ui_lol"
File: wrote 2493722 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\ui_lol"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio" created
File: overwriteflag=0, allowskipfilesflag=2, name="beep.wav"
File: wrote 6820 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\beep.wav"
File: overwriteflag=0, allowskipfilesflag=2, name="in.wav"

File: wrote 60308 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\in.wav"
File: overwriteflag=0, allowskipfilesflag=2, name="out.wav"
File: wrote 106072 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\out.wav"
File: overwriteflag=0, allowskipfilesflag=2, name="play_diagnosis.wav"
File: wrote 78380 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\play_diagnosis.wav"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\resource\fonts" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\resource\fonts" created
File: overwriteflag=0, allowskipfilesflag=2, name="georgiab.ttf"
File: wrote 145940 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\fonts\georgiab.ttf"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\update" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\update" created
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib" created
File: wrote 89128 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\FileManager.dll"
File: wrote 386552 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\Http.dll"
File: wrote 54736 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\IPCLib.dll"
File: wrote 67624 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\LangLib.dll"
File: wrote 147920 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\MessagePumpLib.dll"
File: wrote 123384 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\UILayout.dll"

File: wrote 878584 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\UILib.dll"
File: wrote 68088 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\XmlUIModule.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\update\resource" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\update\resource" created
File: wrote 2530 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\resource\app"
File: wrote 130610 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\resource\ui"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\garena.game.plugins" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\garena.game.plugins" created
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.ak47en"
File: wrote 316407 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.ak47en"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.ak47th"
File: wrote 335847 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.ak47th"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.ava"
File: wrote 270240 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.ava"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.avatw"
File: wrote 537246 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.avatw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.common"
File: wrote 705930 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.common"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.fo3"
File: wrote 110726 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.fo3"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.fo3id"

File: wrote 208329 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.fo3id"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.fo3th"
File: wrote 227528 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.fo3th"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.fo3vn"
File: wrote 241849 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.fo3vn"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.gtv"
File: wrote 1004580 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.gtv"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.headvn"
File: wrote 333702 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.headvn"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.hon"
File: wrote 822701 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.hon"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.honpbt"
File: wrote 792368 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.honpbt"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.jeten"
File: wrote 496659 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.jeten"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.jetth"
File: wrote 363037 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.jetth"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.jettw"
File: wrote 498214 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.jettw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.jetvn"
File: wrote 586742 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.jetvn"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.kgth"
File: wrote 277628 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.kgth"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.kgvn"
File: wrote 392808 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.kgvn"

File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.kofvn"
File: wrote 413890 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.kofvn"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lfstw"
File: wrote 421265 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lfstw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lol"
File: wrote 824410 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lol"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lolid"
File: wrote 388784 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lolid"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lollcu"
File: wrote 220029 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lollcu"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lollcuid"
File: wrote 194393 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lollcuid"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lollcuph"
File: wrote 253285 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lollcuph"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lollcuth"
File: wrote 194680 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lollcuth"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lollcutw"
File: wrote 212221 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lollcutw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lollcuvn"
File: wrote 195083 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lollcuvn"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lolph"
File: wrote 353699 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lolph"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lolth"
File: wrote 398644 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lolth"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.loltw"

File: wrote 483885 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.loltw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lolvn"
File: wrote 256431 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lolvn"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lsth"
File: wrote 302689 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lsth"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lstw"
File: wrote 499299 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lstw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.mhtw"
File: wrote 240689 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.mhtw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.mpth"
File: wrote 399168 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.mpth"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.mptw"
File: wrote 398149 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.mptw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.mstartw"
File: wrote 783133 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.mstartw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.pb"
File: wrote 239689 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.pb"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.pbid"
File: wrote 218412 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.pbid"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.pbph"
File: wrote 632538 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.pbph"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.pbth"
File: wrote 181924 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.pbth"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.poeth"
File: wrote 233722 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.poeth"

File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.poetw"
File: wrote 611426 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.poetw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.shenwuvn"

Plus\garena.game.plugins\garena.game.shenwuvn"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.vsth"
File: wrote 832430 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.vsth"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.westtw"
File: wrote 314011 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.westtw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.worldvn"
File: wrote 505926 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.worldvn"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv" created
File: overwriteflag=0, allowskipfilesflag=2, name="CrashReporter.exe"
File: wrote 743928 to "C:\Program Files (x86)\Garena Plus\gtv\CrashReporter.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="GarenaTV.exe"
File: wrote 295928 to "C:\Program Files (x86)\Garena Plus\gtv\GarenaTV.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="Qt5Core.dll"
File: wrote 4692472 to "C:\Program Files (x86)\Garena Plus\gtv\Qt5Core.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Qt5Gui.dll"
File: wrote 3234768 to "C:\Program Files (x86)\Garena Plus\gtv\Qt5Gui.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Qt5Widgets.dll"
File: wrote 4477392 to "C:\Program Files (x86)\Garena Plus\gtv\Qt5Widgets.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="commutil.dll"
File: wrote 530896 to "C:\Program Files (x86)\Garena Plus\gtv\commutil.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="cryptutil.dll"

File: wrote 151080 to "C:\Program Files (x86)\Garena Plus\gtv\cryptutil.dll"
File: wrote 1231000 to "C:\Program Files (x86)\Garena Plus\gtv\dbghelp.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="ipc.dll"
File: wrote 263120 to "C:\Program Files (x86)\Garena Plus\gtv\ipc.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libprotobuf-lite.dll"
File: wrote 265768 to "C:\Program Files (x86)\Garena Plus\gtv\libprotobuf-lite.dll"
File: wrote 1936320 to "C:\Program Files (x86)\Garena Plus\gtv\log4cxx.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="msvcp120.dll"
File: wrote 455328 to "C:\Program Files (x86)\Garena Plus\gtv\msvcp120.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="msvcr120.dll"
File: wrote 970912 to "C:\Program Files (x86)\Garena Plus\gtv\msvcr120.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="objbase.dll"
File: wrote 36856 to "C:\Program Files (x86)\Garena Plus\gtv\objbase.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs" created
File: overwriteflag=0, allowskipfilesflag=2, name="avutil-55.dll"
File: wrote 563712 to "C:\Program Files (x86)\Garena Plus\gtv\libs\avutil-55.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="filesystem.dll"
File: wrote 54824 to "C:\Program Files (x86)\Garena Plus\gtv\libs\filesystem.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gxxconfigmanager.dll"
File: wrote 447480 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxconfigmanager.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gxxdatabasemanager.dll"
File: wrote 1269712 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxdatabasemanager.dll"

File: overwriteflag=0, allowskipfilesflag=2, name="gxxdatamodel.dll"
File: wrote 681936 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxdatamodel.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gxxfilesystemmanager.dll"
File: wrote 315896 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxfilesystemmanager.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gxxframework.dll"
File: wrote 167888 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxframework.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gxxhttpdownloader.dll"
File: wrote 1393656 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxhttpdownloader.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gxxhttpnetmanager.dll"
File: wrote 461816 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxhttpnetmanager.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gxxmiscutil.dll"
File: wrote 356304 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxmiscutil.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gxxnetmanager.dll"
File: wrote 2233896 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxnetmanager.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gxxuibase.dll"
File: wrote 1900496 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxuibase.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libstream.dll"
File: wrote 2839040 to "C:\Program Files (x86)\Garena Plus\gtv\libs\libstream.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="swresample-2.dll"
File: wrote 289792 to "C:\Program Files (x86)\Garena Plus\gtv\libs\swresample-2.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs\data" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs\data" created
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs\data\x64" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs\data\x64" created
File: overwriteflag=0, allowskipfilesflag=2, name="get-graphics-offsets.exe"

File: wrote 178128 to "C:\Program Files (x86)\Garena Plus\gtv\libs\data\x64\get-graphics-offsets.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="graphics-hook.dll"
File: wrote 1145336 to "C:\Program Files (x86)\Garena Plus\gtv\libs\data\x64\graphics-hook.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="inject-helper.exe"
File: wrote 159184 to "C:\Program Files (x86)\Garena Plus\gtv\libs\data\x64\inject-helper.exe"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs\data\x86" created
File: overwriteflag=0, allowskipfilesflag=2, name="D3DCompiler_43.dll"
File: wrote 2106216 to "C:\Program Files (x86)\Garena Plus\gtv\libs\data\x86\D3DCompiler_43.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs\imageformats" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs\imageformats" created
File: overwriteflag=0, allowskipfilesflag=2, name="qgif.dll"
File: wrote 43984 to "C:\Program Files (x86)\Garena Plus\gtv\libs\imageformats\qgif.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="qico.dll"
File: wrote 44496 to "C:\Program Files (x86)\Garena Plus\gtv\libs\imageformats\qico.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="qjpeg.dll"
File: wrote 262608 to "C:\Program Files (x86)\Garena Plus\gtv\libs\imageformats\qjpeg.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs\platforms" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs\platforms" created

File: overwriteflag=0, allowskipfilesflag=2, name="qwindows.dll"
File: wrote 961488 to "C:\Program Files (x86)\Garena Plus\gtv\libs\platforms\qwindows.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\plugins" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\plugins" created
File: overwriteflag=0, allowskipfilesflag=2, name="gtvcoreplugin.dll"
File: wrote 492496 to "C:\Program Files (x86)\Garena Plus\gtv\plugins\gtvcoreplugin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gtvplatform.dll"
File: wrote 606672 to "C:\Program Files (x86)\Garena Plus\gtv\plugins\gtvplatform.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="gtvui.dll"
File: wrote 1174056 to "C:\Program Files (x86)\Garena Plus\gtv\plugins\gtvui.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\res" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\res" created
File: overwriteflag=0, allowskipfilesflag=2, name="gtvui.rcc"
File: wrote 285117 to "C:\Program Files (x86)\Garena Plus\gtv\res\gtvui.rcc"
File: overwriteflag=0, allowskipfilesflag=2, name="gxx.rcc"
File: wrote 1290462 to "C:\Program Files (x86)\Garena Plus\gtv\res\gxx.rcc"
File: overwriteflag=0, allowskipfilesflag=2, name="im.rcc"
File: wrote 519678 to "C:\Program Files (x86)\Garena Plus\gtv\res\im.rcc"
File: overwriteflag=0, allowskipfilesflag=2, name="resource.dat"
File: wrote 252054 to "C:\Program Files (x86)\Garena Plus\gtv\res\resource.dat"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\lib" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\lib" created
File: wrote 386088 to "C:\Program Files (x86)\Garena Plus\lib\Http.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="MP3Module.dll"

File: wrote 197112 to "C:\Program Files (x86)\Garena Plus\lib\MP3Module.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="TaskManagerLib.dll"
File: wrote 232440 to "C:\Program Files (x86)\Garena Plus\lib\TaskManagerLib.dll"
File: wrote 164392 to "C:\Program Files (x86)\Garena Plus\lib\UILayout.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="XLL.dll"
File: wrote 970744 to "C:\Program Files (x86)\Garena Plus\lib\XLL.dll"
File: wrote 67576 to "C:\Program Files (x86)\Garena Plus\lib\XmlUIModule.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="xlldata"
File: wrote 44149 to "C:\Program Files (x86)\Garena Plus\lib\xlldata"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\lib\delay_load" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\lib\delay_load" created
File: wrote 78328 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\AudioMixerLib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="ClientTcp.dll"
File: wrote 29176 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\ClientTcp.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="FileSender.dll"
File: wrote 1558008 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\FileSender.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="GaFileTransfer.dll"
File: wrote 969168 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\GaFileTransfer.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="GaVoiceGroup.dll"
File: wrote 209912 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\GaVoiceGroup.dll"
File: wrote 257064 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\MediaEngine.dll"

File: overwriteflag=0, allowskipfilesflag=2, name="RSALib.dll"
File: wrote 529400 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\RSALib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="UdtLib.dll"
File: wrote 80424 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\UdtLib.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\lib\fs" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\lib\fs" created
File: overwriteflag=0, allowskipfilesflag=2, name="YYFileSystem.dll"
File: wrote 183288 to "C:\Program Files (x86)\Garena Plus\lib\fs\YYFileSystem.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\theme" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\theme" created
File: overwriteflag=0, allowskipfilesflag=2, name="default.gtheme"
File: wrote 46541 to "C:\Program Files (x86)\Garena Plus\theme\default.gtheme"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\x86" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\x86" created
File: wrote 794152 to "C:\Program Files (x86)\Garena Plus\x86\graphics-hook.dll"
File: wrote 148472 to "C:\Program Files (x86)\Garena Plus\x86\inject-helper.exe"
CreateDirectory: "C:\Program Files (x86)\Garena Plus" (1)
Exec: command=""C:\Program Files (x86)\Garena Plus\ggdllhost.exe" "C:\Program Files (x86)\Garena

Plus\ggspawn.dll",rundll_entry"
Exec: success (""C:\Program Files (x86)\Garena Plus\ggdllhost.exe" "C:\Program Files (x86)\Garena

Plus\ggspawn.dll",rundll_entry")
Delete: "C:\Users\Public\Desktop\Garena Plus.lnk"
RMDir: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garena\Garena Plus"

Delete: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garena\Garena Plus.lnk"
Delete: "C:\Users\Public\Desktop\Garena+.lnk"
CreateDirectory: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garena" (0)
CreateShortCut: out: "C:\ProgramData\Microsoft\Windows\Start

Menu\Programs\Garena\Garena+.lnk", in: "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe ",
icon: ,0, sw=0, hk=0
CreateDirectory: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garena\Garena+" (0)
CreateDirectory: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garena\Garena+"

created

Menu\Programs\Garena\Garena+\Garena+.lnk", in: "C:\Program Files (x86)\Garena
Plus\GarenaMessenger.exe ", icon: ,0, sw=0, hk=0
CreateShortCut: out: "C:\Users\Public\Desktop\Garena+.lnk", in: "C:\Program Files (x86)\Garena

WriteINIStr: wrote [game] im=C:\Program Files (x86)\Garena Plus in

C:\ProgramData\GarenaMessenger\app.ini
WriteINIStr: wrote [app] theme=default in C:\ProgramData\GarenaMessenger\app.ini
WriteINIStr: wrote [app] ver=intl in C:\ProgramData\GarenaMessenger\app.ini
created uninstaller: 598970, "C:\Program Files (x86)\Garena Plus\uninst.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\im"
"DisplayName"="Garena+"
"UninstallString"="C:\Program Files (x86)\Garena Plus\uninst.exe"
"DisplayVersion"="2011"
"URLInfoAbout"="http://www.garena.com"
"Publisher"="Garena Online Pte Ltd."
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Garena\im" "Path"="C:\Program Files (x86)\Garena

Plus"
Call: 996

name="C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\gginst.dll"
File: skipped: "C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\gginst.dll" (overwriteflag=1)
Call: 769
Call: 996

name="C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\System.dll"
File: skipped: "C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\System.dll" (overwriteflag=1)
Jump: 776
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\gginst.dll")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\")
Section: "MainSection"
detailprint: App_Install_Dir = C:\Program Files (x86)\Garena Plus
Call: 996

name="C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\gginst.dll"
File: skipped: "C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\gginst.dll" (overwriteflag=1)
IfFileExists: file "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe" exists, jumping 0
Call: 996

CreateDirectory: "C:\Users\RDC\AppData\Local\Temp" (1)
File: wrote 47096 to "C:\Users\RDC\AppData\Local\Temp\VersionModule.dll"

Call: 996

Call: 996

Delete: "C:\Program Files (x86)\Garena Plus\data"
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\data")
Delete: "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe"
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe")
Delete: "C:\Program Files (x86)\Garena Plus\GaVoice.exe"
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\GaVoice.exe")
Delete: "C:\Program Files (x86)\Garena Plus\ggcode.dll"
Delete: "C:\Program Files (x86)\Garena Plus\ggdownloader.dll"
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\ggdownloader.dll")
Delete: "C:\Program Files (x86)\Garena Plus\PluginAdminExec.exe"
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\PluginAdminExec.exe")
Delete: "C:\Program Files (x86)\Garena Plus\UpdateEx.exe"
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\UpdateEx.exe")
Delete: "C:\Program Files (x86)\Garena Plus\VersionModule.dll"
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\VersionModule.dll")
Delete: "C:\Program Files (x86)\Garena Plus\config.ini"
RMDir: "C:\Program Files (x86)\Garena Plus\lib"

Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\delay_load\AudioMixerLib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\delay_load\ClientTcp.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\delay_load\FileSender.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\delay_load\GaFileTransfer.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\delay_load\GaVoiceGroup.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\delay_load\MediaEngine.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\delay_load\RSALib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\delay_load\UdtLib.dll")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\lib\delay_load\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\fs\YYFileSystem.dll")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\lib\fs\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\Http.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\MP3Module.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\TaskManagerLib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\UILayout.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\XLL.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\xlldata")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\lib\XmlUIModule.dll")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\lib\")
RMDir: "C:\Program Files (x86)\Garena Plus\Plugins"
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Plugins\BBTalk")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Plugins\GameSale")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Plugins\GameSalePlugin.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Plugins\GarenaTalkPlugin.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Plugins\ggplugin.dll")

Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Plugins\News")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Plugins\Platform")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Plugins\PlatformPlugin.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Plugins\PluginNews.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Plugins\Stats")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Plugins\StatsPlugin.dll")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\Plugins\")
RMDir: "C:\Program Files (x86)\Garena Plus\Sound"
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Sound\Audio.wav")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Sound\msg.wav")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\Sound\Nudge.wav")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\Sound\")
RMDir: "C:\Program Files (x86)\Garena Plus\theme"
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\theme\default.gtheme")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\theme\")
RMDir: "C:\Program Files (x86)\Garena Plus\restore"
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\restore\")
RMDir: "C:\Program Files (x86)\Garena Plus\restore_"
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\restore_\280352469\")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\restore_\")
RMDir: "C:\Program Files (x86)\Garena Plus\bbtalk"
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\audiohost.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\BBTalk.exe")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\CommonLib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\DibModule.dll")

Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\FileSystem.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\gagmhook.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\GarenaTalkLoader.exe")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\GarenaTalkOverlay.exe")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\GarenaTalkWeb.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\ggdllhost.exe")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\ggspawn.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\gtalk.supp")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\gtalk.version")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\ImageModule.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\InputHook.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\JpegModule.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\AudioMixerLib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\ChannelUrlDll.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\exchndl.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\FileManager.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\Http.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\InputHookLib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\IPCLib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\LangLib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\MediaEngine.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\MessagePumpLib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\MP3Saver.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\RealTimeVideoEngine.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\ResLib.dll")

Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\TcpClient.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\UdpClient.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\UILayout.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\UILib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lib\XmlUIModule.dll")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\lib\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\libeay32.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\libmp3lame.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\log\channel_stats0.log")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\log\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\LogLib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\LogLibEx.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\lollauncher.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\Overlay.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\PluginKernel.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x64\audiohook.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x64\audiohost.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x64\audioproxy.exe")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x64\hookhelper.exe")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x64\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x86\audiohook.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x86\audiohost.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x86\audioproxy.exe")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x86\hookhelper.exe")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\x86\")

RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\HookAPI.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\hookpolicy.xml")
Delete: DeleteFile("C:\Program Files (x86)\Garena

Plus\bbtalk\plugins\D3DHook\OverlayHookD3D10.dll")

Plus\bbtalk\plugins\D3DHook\OverlayHookD3D11.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\OverlayHookD3D8.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\OverlayHookD3D9.dll")

Plus\bbtalk\plugins\D3DHook\OverlayHookDInput8.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\OverlayUI.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource\app")

Plus\bbtalk\plugins\D3DHook\resource\fx\render.fx")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource\fx\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource\ui")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource\")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\")

Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\bg_tex.png")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\dell_logo.png")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\loading.png")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\pause.png")

Plus\bbtalk\plugins\ttplayer\talktalk_player_plugin.exe")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\plugins\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\PngModule.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\resource\app")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\beep.wav")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\in.wav")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\out.wav")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\play_diagnosis.wav")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\resource\fonts\georgiab.ttf")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\resource\fonts\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\resource\ui_lol")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\resource\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\ServerMemAlloc.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\sqlite3.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\ssleay32.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\FileManager.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\Http.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\IPCLib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\LangLib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\MessagePumpLib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\UILayout.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\UILib.dll")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\XmlUIModule.dll")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\")

Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\update\resource\app")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\update\resource\ui")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\update\resource\")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\update\")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\Update.exe")
Delete: DeleteFile("C:\Program Files (x86)\Garena Plus\bbtalk\VersionModule.dll")
RMDir: RemoveDirectory("C:\Program Files (x86)\Garena Plus\bbtalk\")
Call: 996

name="C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\System.dll"
File: wrote 11264 to "C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\System.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore" (0)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore" created
CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore_\281137560" (0)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore_" created
CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore_\281137560" created
Rename: C:\Program Files (x86)\Garena Plus\ggspawn.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\ggspawn.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\ggspawn.dll->C:\Program Files (x86)\Garena




Rename: C:\Program Files (x86)\Garena Plus\gamehook.dll->C:\Program Files (x86)\Garena
Rename failed: C:\Program Files (x86)\Garena Plus\gamehook.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\gagmhook.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\gagmhook.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\ggcode.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\ggcode.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\CommonLib.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\CommonLib.dll->C:\Program Files

(x86)\Garena Plus\restore_\281137560\CommonLib.dll


Rename: C:\Program Files (x86)\Garena Plus\bbtalk\PluginKernel.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\PluginKernel.dll->C:\Program Files

(x86)\Garena Plus\restore_\281137560\PluginKernel.dll
Rename: C:\Program Files (x86)\Garena Plus\bbtalk\HookAPI.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\HookAPI.dll->C:\Program Files (x86)\Garena




Rename: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayHookDInput8.dll->C:\Program Files

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayHookDInput8.dll->C:\Program Files

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayUI.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayUI.dll->C:\Program Files (x86)\Garena



Rename: C:\Program Files (x86)\Garena Plus\bbtalk\InputHook.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\InputHook.dll->C:\Program Files (x86)\Garena



Rename: C:\Program Files (x86)\Garena Plus\bbtalk\x86\audiohost.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\x86\audiohost.dll->C:\Program Files

(x86)\Garena Plus\restore_\281137560\audiohost.dll







Rename: C:\Program Files (x86)\Garena Plus\bbtalk\x64\hookhelper.exe->C:\Program Files

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\x64\hookhelper.exe->C:\Program Files



Rename: C:\Program Files (x86)\Garena Plus\bbtalk\audiohost.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\audiohost.dll->C:\Program Files (x86)\Garena

File: wrote 275456 to "C:\Program Files (x86)\Garena Plus\7za.dll"
File: wrote 117240 to "C:\Program Files (x86)\Garena Plus\CommonLib.dll"
File: wrote 500176 to "C:\Program Files (x86)\Garena Plus\CxImage.dll"

File: wrote 46544 to "C:\Program Files (x86)\Garena Plus\DibModule.dll"
File: wrote 63992 to "C:\Program Files (x86)\Garena Plus\FileLoader.dll"
File: wrote 1157584 to "C:\Program Files (x86)\Garena Plus\GaTransfer.exe"
File: wrote 198608 to "C:\Program Files (x86)\Garena Plus\GaVoice.exe"
File: wrote 9140688 to "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe"
File: wrote 69584 to "C:\Program Files (x86)\Garena Plus\HookAPI.dll"
File: wrote 49104 to "C:\Program Files (x86)\Garena Plus\HookPolicy.dll"
File: wrote 46544 to "C:\Program Files (x86)\Garena Plus\HookSocket.dll"
File: wrote 205304 to "C:\Program Files (x86)\Garena Plus\ImageModule.dll"
File: wrote 72184 to "C:\Program Files (x86)\Garena Plus\Inject.dll"
File: wrote 71168 to "C:\Program Files (x86)\Garena Plus\MD5.dll"
File: wrote 261624 to "C:\Program Files (x86)\Garena Plus\PluginAdminExec.exe"

File: wrote 100304 to "C:\Program Files (x86)\Garena Plus\PluginKernel.dll"
File: wrote 38352 to "C:\Program Files (x86)\Garena Plus\PluginModule.dll"
File: wrote 39376 to "C:\Program Files (x86)\Garena Plus\ServerMemAlloc.dll"
File: wrote 723448 to "C:\Program Files (x86)\Garena Plus\UpdateEx.exe"
File: wrote 1689080 to "C:\Program Files (x86)\Garena Plus\UpdateManager.exe"
File: wrote 47096 to "C:\Program Files (x86)\Garena Plus\VersionModule.dll"
File: wrote 50128 to "C:\Program Files (x86)\Garena Plus\Zip7Module.dll"
File: wrote 4073561 to "C:\Program Files (x86)\Garena Plus\data"
File: wrote 175096 to "C:\Program Files (x86)\Garena Plus\ggdllhost.exe"
File: wrote 4893136 to "C:\Program Files (x86)\Garena Plus\ggdownloader.dll"
File: wrote 3402744 to "C:\Program Files (x86)\Garena Plus\ggspawn.dll"
File: wrote 399864 to "C:\Program Files (x86)\Garena Plus\gxxmsg.exe"
File: wrote 162304 to "C:\Program Files (x86)\Garena Plus\lame_enc.dll"

File: wrote 827896 to "C:\Program Files (x86)\Garena Plus\libcaptor.dll"
File: wrote 228864 to "C:\Program Files (x86)\Garena Plus\libcurl.dll"
File: wrote 1097216 to "C:\Program Files (x86)\Garena Plus\libeay32.dll"
File: wrote 168400 to "C:\Program Files (x86)\Garena Plus\libmpg123.dll"
File: wrote 153088 to "C:\Program Files (x86)\Garena Plus\libzmq.dll"
File: wrote 1739264 to "C:\Program Files (x86)\Garena Plus\log4cxx.dll"
File: wrote 8796729 to "C:\Program Files (x86)\Garena Plus\resdata"
File: wrote 573100 to "C:\Program Files (x86)\Garena Plus\sqlite3.dll"
File: wrote 238080 to "C:\Program Files (x86)\Garena Plus\ssleay32.dll"
File: wrote 143230 to "C:\Program Files (x86)\Garena Plus\umdata"
File: wrote 100352 to "C:\Program Files (x86)\Garena Plus\zlib1.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Plugins" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Plugins" created

File: wrote 345279 to "C:\Program Files (x86)\Garena Plus\Plugins\BBTalk"
File: wrote 607918 to "C:\Program Files (x86)\Garena Plus\Plugins\GameSale"
File: wrote 238032 to "C:\Program Files (x86)\Garena Plus\Plugins\GameSalePlugin.dll"
File: wrote 411088 to "C:\Program Files (x86)\Garena Plus\Plugins\GarenaTalkPlugin.dll"
File: wrote 197074 to "C:\Program Files (x86)\Garena Plus\Plugins\News"
File: wrote 62488 to "C:\Program Files (x86)\Garena Plus\Plugins\Platform"
File: wrote 114128 to "C:\Program Files (x86)\Garena Plus\Plugins\PlatformPlugin.dll"
File: wrote 242216 to "C:\Program Files (x86)\Garena Plus\Plugins\PluginNews.dll"
File: wrote 40606 to "C:\Program Files (x86)\Garena Plus\Plugins\Stats"
File: wrote 238544 to "C:\Program Files (x86)\Garena Plus\Plugins\StatsPlugin.dll"
File: wrote 2216488 to "C:\Program Files (x86)\Garena Plus\Plugins\ggplugin.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room" (1)
File: wrote 176128 to "C:\Program Files (x86)\Garena Plus\Room\AESocket.dll"

File: wrote 702976 to "C:\Program Files (x86)\Garena Plus\Room\AutoUpdate.exe"
File: wrote 695808 to "C:\Program Files (x86)\Garena Plus\Room\AutoUpdate2.exe"
File: wrote 222720 to "C:\Program Files (x86)\Garena Plus\Room\CS15Hook.dll"
File: wrote 374784 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender.exe"
File: wrote 19456 to "C:\Program Files (x86)\Garena Plus\Room\Gamecn.dat"
File: wrote 23552 to "C:\Program Files (x86)\Garena Plus\Room\Gameen.dat"
File: wrote 19456 to "C:\Program Files (x86)\Garena Plus\Room\Gametw.dat"
File: wrote 22528 to "C:\Program Files (x86)\Garena Plus\Room\Gamevn.dat"
File: wrote 54784 to "C:\Program Files (x86)\Garena Plus\Room\Inject.dll"
File: wrote 113664 to "C:\Program Files (x86)\Garena Plus\Room\L4DSocket.dll"
File: wrote 194560 to "C:\Program Files (x86)\Garena Plus\Room\Roomcn.dat"
File: wrote 195584 to "C:\Program Files (x86)\Garena Plus\Room\Roomen.dat"
File: wrote 198656 to "C:\Program Files (x86)\Garena Plus\Room\Roomtw.dat"

File: wrote 89600 to "C:\Program Files (x86)\Garena Plus\Room\SocketHook.dll"
File: wrote 43008 to "C:\Program Files (x86)\Garena Plus\Room\WC3J.dll"
File: wrote 100352 to "C:\Program Files (x86)\Garena Plus\Room\War3Hook.dll"
File: wrote 404480 to "C:\Program Files (x86)\Garena Plus\Room\XMLSkin.dll"
File: wrote 4257 to "C:\Program Files (x86)\Garena Plus\Room\changelog.garena_room.txt"
File: wrote 1080656 to "C:\Program Files (x86)\Garena Plus\Room\dbghelp.dll"
File: wrote 40 to "C:\Program Files (x86)\Garena Plus\Room\garena_room.dat"
File: wrote 4256856 to "C:\Program Files (x86)\Garena Plus\Room\garena_room.exe"
File: wrote 70144 to "C:\Program Files (x86)\Garena Plus\Room\gcaclientdll.dll"
File: wrote 277784 to "C:\Program Files (x86)\Garena Plus\Room\ggsec.dll"
File: wrote 456704 to "C:\Program Files (x86)\Garena Plus\Room\riched20.dll"
File: wrote 202336 to "C:\Program Files (x86)\Garena Plus\Room\safeapi.dll"

File: wrote 526848 to "C:\Program Files (x86)\Garena Plus\Room\sqlite3.dll"
File: wrote 2509 to "C:\Program Files (x86)\Garena Plus\Room\update.dat"
File: wrote 149 to "C:\Program Files (x86)\Garena Plus\Room\user.xml"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\AutoUpdate" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\AutoUpdate\Skin" (1)
File: wrote 91468 to "C:\Program Files (x86)\Garena Plus\Room\AutoUpdate\Skin\Skin.ggz"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\CrashSender" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages" (1)
File: wrote 1070 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\br.xml"
File: wrote 1026 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\cn.xml"
File: wrote 1107 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\kr.xml"
File: wrote 1349 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\kz.xml"
File: wrote 1478 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\ru.xml"
File: wrote 1066 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\sp.xml"
File: wrote 1002 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\tw.xml"

File: wrote 1164 to "C:\Program Files (x86)\Garena Plus\Room\CrashSender\Languages\vn.xml"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\Languages" (1)
File: wrote 12767 to "C:\Program Files (x86)\Garena Plus\Room\Languages\cn.xml"
File: wrote 62 to "C:\Program Files (x86)\Garena Plus\Room\Languages\en.xml"
File: wrote 19740 to "C:\Program Files (x86)\Garena Plus\Room\Languages\ru.xml"
File: wrote 15375 to "C:\Program Files (x86)\Garena Plus\Room\Languages\tw.xml"
File: wrote 20315 to "C:\Program Files (x86)\Garena Plus\Room\Languages\ua.xml"
File: wrote 14445 to "C:\Program Files (x86)\Garena Plus\Room\Languages\vn.xml"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\Skin" (1)
File: wrote 3192022 to "C:\Program Files (x86)\Garena Plus\Room\Skin\Skin.ggz"
File: wrote 4976 to "C:\Program Files (x86)\Garena Plus\Room\Skin\games.xml"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\SkinRU" (1)
File: wrote 3190404 to "C:\Program Files (x86)\Garena Plus\Room\SkinRU\Skin.ggz"
File: wrote 4976 to "C:\Program Files (x86)\Garena Plus\Room\SkinRU\games.xml"

CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\SkinTW" (1)
File: wrote 3187997 to "C:\Program Files (x86)\Garena Plus\Room\SkinTW\Skin.ggz"
File: wrote 4976 to "C:\Program Files (x86)\Garena Plus\Room\SkinTW\games.xml"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Room\sound" (1)
File: wrote 61292 to "C:\Program Files (x86)\Garena Plus\Room\sound\game.wav"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Sound" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\Sound" created
File: wrote 7476 to "C:\Program Files (x86)\Garena Plus\Sound\Audio.wav"
File: wrote 198188 to "C:\Program Files (x86)\Garena Plus\Sound\Nudge.wav"
File: wrote 75242 to "C:\Program Files (x86)\Garena Plus\Sound\msg.wav"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk" created
File: wrote 7340536 to "C:\Program Files (x86)\Garena Plus\bbtalk\BBTalk.exe"
File: wrote 116728 to "C:\Program Files (x86)\Garena Plus\bbtalk\CommonLib.dll"
File: wrote 46032 to "C:\Program Files (x86)\Garena Plus\bbtalk\DibModule.dll"

File: wrote 66000 to "C:\Program Files (x86)\Garena Plus\bbtalk\FileSystem.dll"
File: wrote 268240 to "C:\Program Files (x86)\Garena Plus\bbtalk\GarenaTalkLoader.exe"
File: wrote 97784 to "C:\Program Files (x86)\Garena Plus\bbtalk\GarenaTalkOverlay.exe"
File: wrote 107512 to "C:\Program Files (x86)\Garena Plus\bbtalk\GarenaTalkWeb.dll"
File: wrote 394744 to "C:\Program Files (x86)\Garena Plus\bbtalk\ImageModule.dll"
File: wrote 79352 to "C:\Program Files (x86)\Garena Plus\bbtalk\InputHook.dll"
File: wrote 118264 to "C:\Program Files (x86)\Garena Plus\bbtalk\JpegModule.dll"
File: wrote 29136 to "C:\Program Files (x86)\Garena Plus\bbtalk\LogLib.dll"
File: wrote 73208 to "C:\Program Files (x86)\Garena Plus\bbtalk\LogLibEx.dll"
File: wrote 2498552 to "C:\Program Files (x86)\Garena Plus\bbtalk\Overlay.dll"
File: wrote 76240 to "C:\Program Files (x86)\Garena Plus\bbtalk\PluginKernel.dll"
File: wrote 112080 to "C:\Program Files (x86)\Garena Plus\bbtalk\PngModule.dll"
File: wrote 39376 to "C:\Program Files (x86)\Garena Plus\bbtalk\ServerMemAlloc.dll"

File: wrote 333264 to "C:\Program Files (x86)\Garena Plus\bbtalk\Update.exe"
File: wrote 35792 to "C:\Program Files (x86)\Garena Plus\bbtalk\VersionModule.dll"
File: wrote 101928 to "C:\Program Files (x86)\Garena Plus\bbtalk\audiohost.dll"
File: wrote 829944 to "C:\Program Files (x86)\Garena Plus\bbtalk\gagmhook.dll"
File: wrote 61944 to "C:\Program Files (x86)\Garena Plus\bbtalk\ggdllhost.exe"
File: wrote 802808 to "C:\Program Files (x86)\Garena Plus\bbtalk\ggspawn.dll"
File: wrote 10 to "C:\Program Files (x86)\Garena Plus\bbtalk\gtalk.version"
File: wrote 1116152 to "C:\Program Files (x86)\Garena Plus\bbtalk\libeay32.dll"
File: wrote 251344 to "C:\Program Files (x86)\Garena Plus\bbtalk\libmp3lame.dll"
File: wrote 53752 to "C:\Program Files (x86)\Garena Plus\bbtalk\lollauncher.dll"
File: wrote 460648 to "C:\Program Files (x86)\Garena Plus\bbtalk\sqlite3.dll"
File: wrote 257488 to "C:\Program Files (x86)\Garena Plus\bbtalk\ssleay32.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\lib" (1)

CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\lib" created
File: wrote 121336 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\AudioMixerLib.dll"
File: wrote 42024 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\ChannelUrlDll.dll"
File: wrote 90064 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\FileManager.dll"
File: wrote 387024 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\Http.dll"
File: wrote 54264 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\IPCLib.dll"
File: wrote 59856 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\InputHookLib.dll"
File: wrote 67624 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\LangLib.dll"
File: wrote 43000 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\MP3Saver.dll"
File: wrote 2807248 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\MediaEngine.dll"
File: wrote 147448 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\MessagePumpLib.dll"
File: wrote 1060344 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\RealTimeVideoEngine.dll"
File: wrote 69112 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\ResLib.dll"

File: wrote 140280 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\TcpClient.dll"
File: wrote 123384 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\UILayout.dll"
File: wrote 879056 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\UILib.dll"
File: wrote 150480 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\UdpClient.dll"
File: wrote 68560 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\XmlUIModule.dll"
File: wrote 437712 to "C:\Program Files (x86)\Garena Plus\bbtalk\lib\exchndl.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins" created
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook" created
File: wrote 69112 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\HookAPI.dll"





Plus\bbtalk\plugins\D3DHook\OverlayHookDInput8.dll"
File: wrote 643624 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\OverlayUI.dll"
File: wrote 768 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\hookpolicy.xml"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource" created
File: wrote 62215 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource\app"
File: wrote 65307 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource\ui"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource\fx" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\D3DHook\resource\fx" created

Plus\bbtalk\plugins\D3DHook\resource\fx\render.fx"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\audiohook" created






CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin" created

Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer" created
File: wrote 91089 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\bg_tex.png"
File: wrote 8039 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\dell_logo.png"
File: wrote 422 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\loading.png"
File: wrote 1538 to "C:\Program Files (x86)\Garena Plus\bbtalk\plugins\ttplayer\pause.png"

Plus\bbtalk\plugins\ttplayer\talktalk_player_plugin.exe"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\resource" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\resource" created
File: wrote 2611475 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\app"
File: wrote 2493722 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\ui_lol"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio" created
File: wrote 6820 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\beep.wav"
File: wrote 60308 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\in.wav"

File: wrote 106072 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\out.wav"
File: wrote 78380 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\audio\play_diagnosis.wav"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\resource\fonts" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\resource\fonts" created
File: wrote 145940 to "C:\Program Files (x86)\Garena Plus\bbtalk\resource\fonts\georgiab.ttf"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\update" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\update" created
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib" created
File: wrote 89128 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\FileManager.dll"
File: wrote 386552 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\Http.dll"
File: wrote 54736 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\IPCLib.dll"
File: wrote 67624 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\LangLib.dll"
File: wrote 147920 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\MessagePumpLib.dll"
File: wrote 123384 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\UILayout.dll"
File: wrote 878584 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\UILib.dll"

File: wrote 68088 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\lib\XmlUIModule.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\update\resource" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\bbtalk\update\resource" created
File: wrote 2530 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\resource\app"
File: wrote 130610 to "C:\Program Files (x86)\Garena Plus\bbtalk\update\resource\ui"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\garena.game.plugins" (1)
File: wrote 316407 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.ak47en"
File: wrote 335847 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.ak47th"
File: wrote 270240 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.ava"
File: wrote 537246 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.avatw"
File: wrote 705930 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.common"
File: wrote 110726 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.fo3"
File: wrote 208329 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.fo3id"
File: wrote 227528 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.fo3th"

File: wrote 241849 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.fo3vn"
File: wrote 1004580 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.gtv"
File: wrote 333702 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.headvn"
File: wrote 822701 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.hon"
File: wrote 792368 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.honpbt"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.jeten"
File: wrote 496659 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.jeten"
File: wrote 363037 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.jetth"
File: wrote 498214 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.jettw"
File: wrote 586742 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.jetvn"
File: wrote 277628 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.kgth"
File: wrote 392808 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.kgvn"
File: wrote 413890 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.kofvn"

File: wrote 421265 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lfstw"
File: wrote 824410 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lol"
File: wrote 388784 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lolid"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lollcu"
File: wrote 220029 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lollcu"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lollcuid"
File: wrote 194393 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lollcuid"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lollcuph"
File: wrote 253285 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lollcuph"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lollcuth"
File: wrote 194680 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lollcuth"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lollcutw"
File: wrote 212221 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lollcutw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.lollcuvn"
File: wrote 195083 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lollcuvn"
File: wrote 353699 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lolph"
File: wrote 398644 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lolth"
File: wrote 483885 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.loltw"
File: wrote 256431 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lolvn"

File: wrote 302689 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lsth"
File: wrote 499299 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.lstw"
File: wrote 240689 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.mhtw"
File: wrote 399168 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.mpth"
File: wrote 398149 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.mptw"
File: wrote 783133 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.mstartw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.pb"
File: wrote 239689 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.pb"
File: wrote 218412 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.pbid"
File: wrote 632538 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.pbph"
File: wrote 181924 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.pbth"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.poeth"
File: wrote 233722 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.poeth"
File: wrote 611426 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.poetw"

Plus\garena.game.plugins\garena.game.shenwuvn"
File: wrote 832430 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.vsth"
File: wrote 314011 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.westtw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.worldvn"
File: wrote 505926 to "C:\Program Files (x86)\Garena Plus\garena.game.plugins\garena.game.worldvn"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv" (1)
File: wrote 743928 to "C:\Program Files (x86)\Garena Plus\gtv\CrashReporter.exe"
File: wrote 295928 to "C:\Program Files (x86)\Garena Plus\gtv\GarenaTV.exe"
File: wrote 4692472 to "C:\Program Files (x86)\Garena Plus\gtv\Qt5Core.dll"
File: wrote 3234768 to "C:\Program Files (x86)\Garena Plus\gtv\Qt5Gui.dll"
File: wrote 4477392 to "C:\Program Files (x86)\Garena Plus\gtv\Qt5Widgets.dll"
File: wrote 530896 to "C:\Program Files (x86)\Garena Plus\gtv\commutil.dll"
File: wrote 151080 to "C:\Program Files (x86)\Garena Plus\gtv\cryptutil.dll"
File: wrote 1231000 to "C:\Program Files (x86)\Garena Plus\gtv\dbghelp.dll"

File: wrote 263120 to "C:\Program Files (x86)\Garena Plus\gtv\ipc.dll"
File: wrote 265768 to "C:\Program Files (x86)\Garena Plus\gtv\libprotobuf-lite.dll"
File: wrote 1936320 to "C:\Program Files (x86)\Garena Plus\gtv\log4cxx.dll"
File: wrote 455328 to "C:\Program Files (x86)\Garena Plus\gtv\msvcp120.dll"
File: wrote 970912 to "C:\Program Files (x86)\Garena Plus\gtv\msvcr120.dll"
File: wrote 36856 to "C:\Program Files (x86)\Garena Plus\gtv\objbase.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs" (1)
File: wrote 563712 to "C:\Program Files (x86)\Garena Plus\gtv\libs\avutil-55.dll"
File: wrote 54824 to "C:\Program Files (x86)\Garena Plus\gtv\libs\filesystem.dll"
File: wrote 447480 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxconfigmanager.dll"
File: wrote 1269712 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxdatabasemanager.dll"
File: wrote 681936 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxdatamodel.dll"
File: wrote 315896 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxfilesystemmanager.dll"

File: wrote 167888 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxframework.dll"
File: wrote 1393656 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxhttpdownloader.dll"
File: wrote 461816 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxhttpnetmanager.dll"
File: wrote 356304 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxmiscutil.dll"
File: wrote 2233896 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxnetmanager.dll"
File: wrote 1900496 to "C:\Program Files (x86)\Garena Plus\gtv\libs\gxxuibase.dll"
File: wrote 2839040 to "C:\Program Files (x86)\Garena Plus\gtv\libs\libstream.dll"
File: wrote 289792 to "C:\Program Files (x86)\Garena Plus\gtv\libs\swresample-2.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs\data" (1)

File: wrote 2106216 to "C:\Program Files (x86)\Garena Plus\gtv\libs\data\x86\D3DCompiler_43.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs\imageformats" (1)
File: wrote 43984 to "C:\Program Files (x86)\Garena Plus\gtv\libs\imageformats\qgif.dll"
File: wrote 44496 to "C:\Program Files (x86)\Garena Plus\gtv\libs\imageformats\qico.dll"
File: wrote 262608 to "C:\Program Files (x86)\Garena Plus\gtv\libs\imageformats\qjpeg.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\libs\platforms" (1)
File: wrote 961488 to "C:\Program Files (x86)\Garena Plus\gtv\libs\platforms\qwindows.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\plugins" (1)
File: wrote 492496 to "C:\Program Files (x86)\Garena Plus\gtv\plugins\gtvcoreplugin.dll"
File: wrote 606672 to "C:\Program Files (x86)\Garena Plus\gtv\plugins\gtvplatform.dll"
File: wrote 1174056 to "C:\Program Files (x86)\Garena Plus\gtv\plugins\gtvui.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\gtv\res" (1)

File: wrote 285117 to "C:\Program Files (x86)\Garena Plus\gtv\res\gtvui.rcc"
File: wrote 1290462 to "C:\Program Files (x86)\Garena Plus\gtv\res\gxx.rcc"
File: wrote 519678 to "C:\Program Files (x86)\Garena Plus\gtv\res\im.rcc"
File: wrote 252054 to "C:\Program Files (x86)\Garena Plus\gtv\res\resource.dat"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\lib" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\lib" created
File: wrote 386088 to "C:\Program Files (x86)\Garena Plus\lib\Http.dll"
File: wrote 197112 to "C:\Program Files (x86)\Garena Plus\lib\MP3Module.dll"
File: wrote 232440 to "C:\Program Files (x86)\Garena Plus\lib\TaskManagerLib.dll"
File: wrote 164392 to "C:\Program Files (x86)\Garena Plus\lib\UILayout.dll"
File: wrote 970744 to "C:\Program Files (x86)\Garena Plus\lib\XLL.dll"
File: wrote 67576 to "C:\Program Files (x86)\Garena Plus\lib\XmlUIModule.dll"
File: wrote 44149 to "C:\Program Files (x86)\Garena Plus\lib\xlldata"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\lib\delay_load" (1)

CreateDirectory: "C:\Program Files (x86)\Garena Plus\lib\delay_load" created
File: wrote 78328 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\AudioMixerLib.dll"
File: wrote 29176 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\ClientTcp.dll"
File: wrote 1558008 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\FileSender.dll"
File: wrote 969168 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\GaFileTransfer.dll"
File: wrote 209912 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\GaVoiceGroup.dll"
File: wrote 257064 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\MediaEngine.dll"
File: wrote 529400 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\RSALib.dll"
File: wrote 80424 to "C:\Program Files (x86)\Garena Plus\lib\delay_load\UdtLib.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\lib\fs" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\lib\fs" created
File: wrote 183288 to "C:\Program Files (x86)\Garena Plus\lib\fs\YYFileSystem.dll"
CreateDirectory: "C:\Program Files (x86)\Garena Plus\theme" (1)
CreateDirectory: "C:\Program Files (x86)\Garena Plus\theme" created
File: wrote 46541 to "C:\Program Files (x86)\Garena Plus\theme\default.gtheme"

CreateDirectory: "C:\Program Files (x86)\Garena Plus\x86" (1)
File: wrote 794152 to "C:\Program Files (x86)\Garena Plus\x86\graphics-hook.dll"
File: wrote 148472 to "C:\Program Files (x86)\Garena Plus\x86\inject-helper.exe"
Exec: command=""C:\Program Files (x86)\Garena Plus\ggdllhost.exe" "C:\Program Files (x86)\Garena

Exec: success (""C:\Program Files (x86)\Garena Plus\ggdllhost.exe" "C:\Program Files (x86)\Garena

Delete: DeleteFile("C:\Users\Public\Desktop\Garena+.lnk")

Menu\Programs\Garena\Garena+.lnk", in: "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe ",
icon: ,0, sw=0, hk=0

Menu\Programs\Garena\Garena+\Garena+.lnk", in: "C:\Program Files (x86)\Garena
CreateShortCut: out: "C:\Users\Public\Desktop\Garena+.lnk", in: "C:\Program Files (x86)\Garena

WriteINIStr: wrote [game] im=C:\Program Files (x86)\Garena Plus in

C:\ProgramData\GarenaMessenger\app.ini

created uninstaller: 598970, "C:\Program Files (x86)\Garena Plus\uninst.exe"
"UninstallString"="C:\Program Files (x86)\Garena Plus\uninst.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Garena\im" "Path"="C:\Program Files (x86)\Garena

Plus"
Call: 996

Call: 769
Call: 996

name="C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\System.dll"
File: skipped: "C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\System.dll" (overwriteflag=1)
Jump: 776
Jump: 96
"NSIS:Language"="1033"
Call: 255
Jump: 269
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
WriteINIStr: wrote [Settings] NextButtonText=&Finish in

C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\ioSpecial.ini
WriteINIStr: wrote [Field 2] Bottom=38 in

WriteINIStr: wrote [Field 3] Top=45 in C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\ioSpecial.ini
Call: 255
Jump: 269
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
WriteINIStr: wrote [Field 2] Text=Completing the Garena+ Setup Wizard in

Call: 255
Jump: 269
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 282
Jump: 268
Jump: 282
Jump: 268
Jump: 282
Jump: 268
Jump: 282
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
WriteINIStr: wrote [Field 3] Text=Garena+ has been installed on your computer.\r\n\r\nClick Finish to
close this wizard. in C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\ioSpecial.ini
WriteINIStr: wrote [Field 4] Type=CheckBox in

Call: 255
Jump: 269
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
WriteINIStr: wrote [Field 4] Text=&Run Garena+ in

WriteINIStr: wrote [Field 4] Left=120 in C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\ioSpecial.ini
WriteINIStr: wrote [Field 4] Right=315 in C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\ioSpecial.ini
WriteINIStr: wrote [Field 4] Top=90 in C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\ioSpecial.ini

WriteINIStr: wrote [Field 4] State=1 in C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\ioSpecial.ini
WriteINIStr: wrote [Settings] Numfields=4 in

Call: 905
Jump: 910
Call: 996

name="C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\InstallOptions.dll"
File: skipped: "C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\InstallOptions.dll" (overwriteflag=1)
Call: 910
Call: 996

name="C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\InstallOptions.dll"
File: skipped: "C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\InstallOptions.dll" (overwriteflag=1)

Call: 915
Jump: 919
Call: 919
Exec: command="C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe"
Exec: success ("C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\gginst.dll")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\InstallOptions.dll")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\ioSpecial.ini")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\LangDLL.dll")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\modern-header.bmp")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\modern-wizard.bmp")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\RDC\AppData\Local\Temp\nsxC598.tmp\")
logging set to 1
Section: "MainSection"
detailprint: App_Install_Dir = D:\Messenger\Garena Plus
Call: 989

name="C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\gginst.dll"
File: skipped: "C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\gginst.dll" (overwriteflag=1)
IfFileExists: file "D:\Messenger\Garena Plus\GarenaMessenger.exe" exists, jumping 0
Call: 989

CreateDirectory: "C:\Users\RDC\AppData\Local\Temp" (1)

File: wrote 46704 to "C:\Users\RDC\AppData\Local\Temp\VersionModule.dll"
Call: 989

CreateDirectory: "D:\Messenger\Garena Plus" (1)
Call: 989

Delete: "D:\Messenger\Garena Plus\data"
Delete: DeleteFile("D:\Messenger\Garena Plus\data")
Delete: "D:\Messenger\Garena Plus\GarenaMessenger.exe"
Delete: DeleteFile("D:\Messenger\Garena Plus\GarenaMessenger.exe")
Delete: "D:\Messenger\Garena Plus\GaVoice.exe"
Delete: DeleteFile("D:\Messenger\Garena Plus\GaVoice.exe")
Delete: "D:\Messenger\Garena Plus\ggcode.dll"
Delete: "D:\Messenger\Garena Plus\ggdownloader.dll"
Delete: DeleteFile("D:\Messenger\Garena Plus\ggdownloader.dll")
Delete: "D:\Messenger\Garena Plus\PluginAdminExec.exe"
Delete: DeleteFile("D:\Messenger\Garena Plus\PluginAdminExec.exe")
Delete: "D:\Messenger\Garena Plus\UpdateEx.exe"
Delete: DeleteFile("D:\Messenger\Garena Plus\UpdateEx.exe")
Delete: "D:\Messenger\Garena Plus\VersionModule.dll"
Delete: DeleteFile("D:\Messenger\Garena Plus\VersionModule.dll")

Delete: "D:\Messenger\Garena Plus\config.ini"
RMDir: "D:\Messenger\Garena Plus\lib"
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\delay_load\AudioMixerLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\delay_load\ClientTcp.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\delay_load\FileSender.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\delay_load\GaFileTransfer.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\delay_load\GaVoiceGroup.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\delay_load\MediaEngine.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\delay_load\RSALib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\delay_load\UdtLib.dll")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\lib\delay_load\")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\fs\YYFileSystem.dll")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\lib\fs\")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\Http.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\MP3Module.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\TaskManagerLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\UILayout.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\XLL.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\xlldata")
Delete: DeleteFile("D:\Messenger\Garena Plus\lib\XmlUIModule.dll")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\lib\")
RMDir: "D:\Messenger\Garena Plus\Plugins"
Delete: DeleteFile("D:\Messenger\Garena Plus\Plugins\BBTalk")
Delete: DeleteFile("D:\Messenger\Garena Plus\Plugins\GameSale")
Delete: DeleteFile("D:\Messenger\Garena Plus\Plugins\GameSalePlugin.dll")

Delete: DeleteFile("D:\Messenger\Garena Plus\Plugins\GarenaTalkPlugin.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\Plugins\ggplugin.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\Plugins\News")
Delete: DeleteFile("D:\Messenger\Garena Plus\Plugins\Platform")
Delete: DeleteFile("D:\Messenger\Garena Plus\Plugins\PlatformPlugin.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\Plugins\PluginNews.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\Plugins\Stats")
Delete: DeleteFile("D:\Messenger\Garena Plus\Plugins\StatsPlugin.dll")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\Plugins\")
RMDir: "D:\Messenger\Garena Plus\Sound"
Delete: DeleteFile("D:\Messenger\Garena Plus\Sound\Audio.wav")
Delete: DeleteFile("D:\Messenger\Garena Plus\Sound\msg.wav")
Delete: DeleteFile("D:\Messenger\Garena Plus\Sound\Nudge.wav")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\Sound\")
RMDir: "D:\Messenger\Garena Plus\theme"
Delete: DeleteFile("D:\Messenger\Garena Plus\theme\default.gtheme")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\theme\")
RMDir: "D:\Messenger\Garena Plus\restore"
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\restore\")
RMDir: "D:\Messenger\Garena Plus\restore_"
Delete: DeleteFile("D:\Messenger\Garena Plus\restore_\data")
Delete: DeleteFile("D:\Messenger\Garena Plus\restore_\garena.game.plugins\garena.game.common")
Delete: DeleteFile("D:\Messenger\Garena Plus\restore_\garena.game.plugins\garena.game.lol")
Delete: DeleteFile("D:\Messenger\Garena Plus\restore_\garena.game.plugins\garena.game.lolid")
Delete: DeleteFile("D:\Messenger\Garena Plus\restore_\garena.game.plugins\garena.game.lolph")

Delete: DeleteFile("D:\Messenger\Garena Plus\restore_\garena.game.plugins\garena.game.lolth")
Delete: DeleteFile("D:\Messenger\Garena Plus\restore_\garena.game.plugins\garena.game.loltw")
Delete: DeleteFile("D:\Messenger\Garena Plus\restore_\garena.game.plugins\garena.game.lolvn")
Delete: DeleteFile("D:\Messenger\Garena Plus\restore_\garena.game.plugins\garena.game.pb")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\restore_\garena.game.plugins\")
Delete: DeleteFile("D:\Messenger\Garena Plus\restore_\GarenaMessenger.exe")
Delete: DeleteFile("D:\Messenger\Garena Plus\restore_\Plugins\ggplugin.dll")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\restore_\Plugins\")
Delete: DeleteFile("D:\Messenger\Garena Plus\restore_\VersionModule.dll")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\restore_\")
RMDir: "D:\Messenger\Garena Plus\bbtalk"
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\audiohost.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\BBTalk.exe")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\CommonLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\DibModule.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\FileSystem.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\gagmhook.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\GarenaTalkLoader.exe")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\GarenaTalkOverlay.exe")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\GarenaTalkWeb.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\ggdllhost.exe")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\ggspawn.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\gtalk.supp")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\gtalk.version")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\ImageModule.dll")

Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\InputHook.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\JpegModule.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\AudioMixerLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\ChannelUrlDll.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\exchndl.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\FileManager.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\Http.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\InputHookLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\IPCLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\LangLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\MediaEngine.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\MessagePumpLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\MP3Saver.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\RealTimeVideoEngine.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\ResLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\TcpClient.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\UdpClient.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\UILayout.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\UILib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lib\XmlUIModule.dll")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\lib\")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\libeay32.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\libmp3lame.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\log\channel_stats0.log")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\log\")

Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\LogLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\LogLibEx.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\lollauncher.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\Overlay.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\PluginKernel.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x64\audiohook.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x64\audiohost.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x64\audioproxy.exe")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x64\hookhelper.exe")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x64\")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x86\audiohook.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x86\audiohost.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x86\audioproxy.exe")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x86\hookhelper.exe")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x86\")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\HookAPI.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\hookpolicy.xml")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\OverlayHookD3D10.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\OverlayHookDInput8.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\OverlayUI.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\resource\app")

Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\resource\fx\render.fx")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\resource\fx\")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\resource\ui")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\resource\")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\plugins\npPlugin\")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer\bg_tex.png")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer\dell_logo.png")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer\loading.png")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer\pause.png")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer\talktalk_player_plugin.exe")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer\")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\plugins\")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\PngModule.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\resource\app")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\resource\audio\beep.wav")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\resource\audio\in.wav")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\resource\audio\out.wav")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\resource\audio\play_diagnosis.wav")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\resource\audio\")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\resource\fonts\georgiab.ttf")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\resource\fonts\")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\resource\ui_lol")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\resource\")

Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\ServerMemAlloc.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\sqlite3.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\ssleay32.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\update\lib\FileManager.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\update\lib\Http.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\update\lib\IPCLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\update\lib\LangLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\update\lib\MessagePumpLib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\update\lib\UILayout.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\update\lib\UILib.dll")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\update\lib\XmlUIModule.dll")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\update\lib\")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\update\resource\app")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\update\resource\ui")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\update\resource\")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\update\")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\Update.exe")
Delete: DeleteFile("D:\Messenger\Garena Plus\bbtalk\VersionModule.dll")
RMDir: RemoveDirectory("D:\Messenger\Garena Plus\bbtalk\")
Call: 989

name="C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\System.dll"
File: skipped: "C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\System.dll" (overwriteflag=1)
CreateDirectory: "D:\Messenger\Garena Plus\restore" (0)
CreateDirectory: "D:\Messenger\Garena Plus\restore" created
CreateDirectory: "D:\Messenger\Garena Plus\restore_\286784313" (0)

CreateDirectory: "D:\Messenger\Garena Plus\restore_" created
CreateDirectory: "D:\Messenger\Garena Plus\restore_\286784313" created
Rename: D:\Messenger\Garena Plus\ggspawn.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\ggspawn.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\ggspawn.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\ggdllhost.exe->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\ggdllhost.exe->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\ggdllhost.exe->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\gamehook.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\gamehook.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\gagmhook.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\gagmhook.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\ggcode.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\ggcode.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\CommonLib.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\CommonLib.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\Overlay.dll->D:\Messenger\Garena
Rename failed: D:\Messenger\Garena Plus\bbtalk\Overlay.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\PluginKernel.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\PluginKernel.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\HookAPI.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\HookAPI.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\OverlayHookD3D8.dll->D:\Messenger\Garena

Plus\restore_\286784313\OverlayHookD3D8.dll
Rename failed: D:\Messenger\Garena Plus\bbtalk\OverlayHookD3D8.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\OverlayHookD3D9.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\OverlayHookD3D9.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\OverlayHookDInput8.dll->D:\Messenger\Garena

Plus\restore_\286784313\OverlayHookDInput8.dll
Rename failed: D:\Messenger\Garena Plus\bbtalk\OverlayHookDInput8.dll->D:\Messenger\Garena

Plus\restore_\286784313\OverlayHookDInput8.dll
Rename: D:\Messenger\Garena Plus\bbtalk\OverlayUI.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\OverlayUI.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\Overlay.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\Overlay.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\InputHook.dll->D:\Messenger\Garena
Rename failed: D:\Messenger\Garena Plus\bbtalk\InputHook.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\x86\audiohook.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\x86\audiohook.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\x86\audiohost.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\x86\audiohost.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\x86\EasyHook32.dll->D:\Messenger\Garena

Plus\restore_\286784313\EasyHook32.dll
Rename failed: D:\Messenger\Garena Plus\bbtalk\x86\EasyHook32.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\x86\libzmq.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\x86\libzmq.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\x64\audiohook.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\x64\audiohook.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\x64\EasyHook64.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\x64\EasyHook64.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\x64\hookhelper.exe->D:\Messenger\Garena

Plus\restore_\286784313\hookhelper.exe
Rename failed: D:\Messenger\Garena Plus\bbtalk\x64\hookhelper.exe->D:\Messenger\Garena

Plus\restore_\286784313\hookhelper.exe
Rename: D:\Messenger\Garena Plus\bbtalk\x64\libzmq.dll->D:\Messenger\Garena
Rename failed: D:\Messenger\Garena Plus\bbtalk\x64\libzmq.dll->D:\Messenger\Garena

Rename: D:\Messenger\Garena Plus\bbtalk\audiohost.dll->D:\Messenger\Garena

Rename failed: D:\Messenger\Garena Plus\bbtalk\audiohost.dll->D:\Messenger\Garena

File: wrote 275456 to "D:\Messenger\Garena Plus\7za.dll"
File: wrote 117712 to "D:\Messenger\Garena Plus\CommonLib.dll"
File: wrote 499704 to "D:\Messenger\Garena Plus\CxImage.dll"
File: wrote 46072 to "D:\Messenger\Garena Plus\DibModule.dll"
File: wrote 63528 to "D:\Messenger\Garena Plus\FileLoader.dll"
File: wrote 1157584 to "D:\Messenger\Garena Plus\GaTransfer.exe"
File: wrote 198608 to "D:\Messenger\Garena Plus\GaVoice.exe"
File: wrote 9184272 to "D:\Messenger\Garena Plus\GarenaMessenger.exe"
File: wrote 69112 to "D:\Messenger\Garena Plus\HookAPI.dll"

File: wrote 48632 to "D:\Messenger\Garena Plus\HookPolicy.dll"
File: wrote 46544 to "D:\Messenger\Garena Plus\HookSocket.dll"
File: wrote 205304 to "D:\Messenger\Garena Plus\ImageModule.dll"
File: wrote 72184 to "D:\Messenger\Garena Plus\Inject.dll"
File: wrote 71168 to "D:\Messenger\Garena Plus\MD5.dll"
File: wrote 261624 to "D:\Messenger\Garena Plus\PluginAdminExec.exe"
File: wrote 99368 to "D:\Messenger\Garena Plus\PluginKernel.dll"
File: wrote 38352 to "D:\Messenger\Garena Plus\PluginModule.dll"
File: wrote 38904 to "D:\Messenger\Garena Plus\ServerMemAlloc.dll"
File: wrote 723920 to "D:\Messenger\Garena Plus\UpdateEx.exe"
File: wrote 1689552 to "D:\Messenger\Garena Plus\UpdateManager.exe"
File: wrote 46704 to "D:\Messenger\Garena Plus\VersionModule.dll"
File: wrote 49656 to "D:\Messenger\Garena Plus\Zip7Module.dll"

File: wrote 4079106 to "D:\Messenger\Garena Plus\data"
File: wrote 175568 to "D:\Messenger\Garena Plus\ggdllhost.exe"
File: wrote 4893136 to "D:\Messenger\Garena Plus\ggdownloader.dll"
File: wrote 2737384 to "D:\Messenger\Garena Plus\ggspawn.dll"
File: wrote 400336 to "D:\Messenger\Garena Plus\gxxmsg.exe"
File: wrote 162304 to "D:\Messenger\Garena Plus\lame_enc.dll"
File: wrote 827896 to "D:\Messenger\Garena Plus\libcaptor.dll"
File: wrote 228864 to "D:\Messenger\Garena Plus\libcurl.dll"
File: wrote 1097216 to "D:\Messenger\Garena Plus\libeay32.dll"
File: wrote 168400 to "D:\Messenger\Garena Plus\libmpg123.dll"
File: wrote 153088 to "D:\Messenger\Garena Plus\libzmq.dll"
File: wrote 1739264 to "D:\Messenger\Garena Plus\log4cxx.dll"

File: wrote 8796729 to "D:\Messenger\Garena Plus\resdata"
File: wrote 573100 to "D:\Messenger\Garena Plus\sqlite3.dll"
File: wrote 238080 to "D:\Messenger\Garena Plus\ssleay32.dll"
File: wrote 141486 to "D:\Messenger\Garena Plus\umdata"
File: wrote 100352 to "D:\Messenger\Garena Plus\zlib1.dll"
CreateDirectory: "D:\Messenger\Garena Plus\Plugins" (1)
CreateDirectory: "D:\Messenger\Garena Plus\Plugins" created
File: wrote 345279 to "D:\Messenger\Garena Plus\Plugins\BBTalk"
File: wrote 607918 to "D:\Messenger\Garena Plus\Plugins\GameSale"
File: wrote 238032 to "D:\Messenger\Garena Plus\Plugins\GameSalePlugin.dll"
File: wrote 410616 to "D:\Messenger\Garena Plus\Plugins\GarenaTalkPlugin.dll"
File: wrote 197074 to "D:\Messenger\Garena Plus\Plugins\News"
File: wrote 62488 to "D:\Messenger\Garena Plus\Plugins\Platform"
File: wrote 114128 to "D:\Messenger\Garena Plus\Plugins\PlatformPlugin.dll"

File: wrote 243152 to "D:\Messenger\Garena Plus\Plugins\PluginNews.dll"
File: wrote 40606 to "D:\Messenger\Garena Plus\Plugins\Stats"
File: wrote 238544 to "D:\Messenger\Garena Plus\Plugins\StatsPlugin.dll"
File: wrote 2095120 to "D:\Messenger\Garena Plus\Plugins\ggplugin.dll"
CreateDirectory: "D:\Messenger\Garena Plus\Room" (1)
File: wrote 176128 to "D:\Messenger\Garena Plus\Room\AESocket.dll"
File: wrote 702976 to "D:\Messenger\Garena Plus\Room\AutoUpdate.exe"
File: wrote 695808 to "D:\Messenger\Garena Plus\Room\AutoUpdate2.exe"
File: wrote 222720 to "D:\Messenger\Garena Plus\Room\CS15Hook.dll"
File: wrote 374784 to "D:\Messenger\Garena Plus\Room\CrashSender.exe"
File: wrote 19456 to "D:\Messenger\Garena Plus\Room\Gamecn.dat"
File: wrote 23552 to "D:\Messenger\Garena Plus\Room\Gameen.dat"
File: wrote 19456 to "D:\Messenger\Garena Plus\Room\Gametw.dat"

File: wrote 22528 to "D:\Messenger\Garena Plus\Room\Gamevn.dat"
File: wrote 54784 to "D:\Messenger\Garena Plus\Room\Inject.dll"
File: wrote 113664 to "D:\Messenger\Garena Plus\Room\L4DSocket.dll"
File: wrote 194560 to "D:\Messenger\Garena Plus\Room\Roomcn.dat"
File: wrote 195584 to "D:\Messenger\Garena Plus\Room\Roomen.dat"
File: wrote 198656 to "D:\Messenger\Garena Plus\Room\Roomtw.dat"
File: wrote 89600 to "D:\Messenger\Garena Plus\Room\SocketHook.dll"
File: wrote 43008 to "D:\Messenger\Garena Plus\Room\WC3J.dll"
File: wrote 100352 to "D:\Messenger\Garena Plus\Room\War3Hook.dll"
File: wrote 404480 to "D:\Messenger\Garena Plus\Room\XMLSkin.dll"
File: wrote 4257 to "D:\Messenger\Garena Plus\Room\changelog.garena_room.txt"
File: wrote 1080656 to "D:\Messenger\Garena Plus\Room\dbghelp.dll"

File: wrote 40 to "D:\Messenger\Garena Plus\Room\garena_room.dat"
File: wrote 4256856 to "D:\Messenger\Garena Plus\Room\garena_room.exe"
File: wrote 70144 to "D:\Messenger\Garena Plus\Room\gcaclientdll.dll"
File: wrote 277784 to "D:\Messenger\Garena Plus\Room\ggsec.dll"
File: wrote 456704 to "D:\Messenger\Garena Plus\Room\riched20.dll"
File: wrote 202336 to "D:\Messenger\Garena Plus\Room\safeapi.dll"
File: wrote 526848 to "D:\Messenger\Garena Plus\Room\sqlite3.dll"
File: wrote 2509 to "D:\Messenger\Garena Plus\Room\update.dat"
File: wrote 149 to "D:\Messenger\Garena Plus\Room\user.xml"
CreateDirectory: "D:\Messenger\Garena Plus\Room\AutoUpdate" (1)
CreateDirectory: "D:\Messenger\Garena Plus\Room\AutoUpdate\Skin" (1)
File: wrote 91468 to "D:\Messenger\Garena Plus\Room\AutoUpdate\Skin\Skin.ggz"
CreateDirectory: "D:\Messenger\Garena Plus\Room\CrashSender" (1)
CreateDirectory: "D:\Messenger\Garena Plus\Room\CrashSender\Languages" (1)
File: wrote 1070 to "D:\Messenger\Garena Plus\Room\CrashSender\Languages\br.xml"

File: wrote 1026 to "D:\Messenger\Garena Plus\Room\CrashSender\Languages\cn.xml"
File: wrote 1107 to "D:\Messenger\Garena Plus\Room\CrashSender\Languages\kr.xml"
File: wrote 1349 to "D:\Messenger\Garena Plus\Room\CrashSender\Languages\kz.xml"
File: wrote 1478 to "D:\Messenger\Garena Plus\Room\CrashSender\Languages\ru.xml"
File: wrote 1066 to "D:\Messenger\Garena Plus\Room\CrashSender\Languages\sp.xml"
File: wrote 1002 to "D:\Messenger\Garena Plus\Room\CrashSender\Languages\tw.xml"
File: wrote 1164 to "D:\Messenger\Garena Plus\Room\CrashSender\Languages\vn.xml"
CreateDirectory: "D:\Messenger\Garena Plus\Room\Languages" (1)
File: wrote 12767 to "D:\Messenger\Garena Plus\Room\Languages\cn.xml"
File: wrote 62 to "D:\Messenger\Garena Plus\Room\Languages\en.xml"
File: wrote 19740 to "D:\Messenger\Garena Plus\Room\Languages\ru.xml"
File: wrote 15375 to "D:\Messenger\Garena Plus\Room\Languages\tw.xml"
File: wrote 20315 to "D:\Messenger\Garena Plus\Room\Languages\ua.xml"

File: wrote 14445 to "D:\Messenger\Garena Plus\Room\Languages\vn.xml"
CreateDirectory: "D:\Messenger\Garena Plus\Room\Skin" (1)
File: wrote 3192022 to "D:\Messenger\Garena Plus\Room\Skin\Skin.ggz"
File: wrote 4976 to "D:\Messenger\Garena Plus\Room\Skin\games.xml"
CreateDirectory: "D:\Messenger\Garena Plus\Room\SkinRU" (1)
File: wrote 3190404 to "D:\Messenger\Garena Plus\Room\SkinRU\Skin.ggz"
File: wrote 4976 to "D:\Messenger\Garena Plus\Room\SkinRU\games.xml"
CreateDirectory: "D:\Messenger\Garena Plus\Room\SkinTW" (1)
File: wrote 3187997 to "D:\Messenger\Garena Plus\Room\SkinTW\Skin.ggz"
File: wrote 4976 to "D:\Messenger\Garena Plus\Room\SkinTW\games.xml"
CreateDirectory: "D:\Messenger\Garena Plus\Room\sound" (1)
File: wrote 61292 to "D:\Messenger\Garena Plus\Room\sound\game.wav"
CreateDirectory: "D:\Messenger\Garena Plus\Sound" (1)
CreateDirectory: "D:\Messenger\Garena Plus\Sound" created
File: wrote 7476 to "D:\Messenger\Garena Plus\Sound\Audio.wav"

File: wrote 198188 to "D:\Messenger\Garena Plus\Sound\Nudge.wav"
File: wrote 75242 to "D:\Messenger\Garena Plus\Sound\msg.wav"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk" created
File: wrote 7334400 to "D:\Messenger\Garena Plus\bbtalk\BBTalk.exe"
File: wrote 117200 to "D:\Messenger\Garena Plus\bbtalk\CommonLib.dll"
File: wrote 45560 to "D:\Messenger\Garena Plus\bbtalk\DibModule.dll"
File: wrote 66000 to "D:\Messenger\Garena Plus\bbtalk\FileSystem.dll"
File: wrote 268240 to "D:\Messenger\Garena Plus\bbtalk\GarenaTalkLoader.exe"
File: wrote 98256 to "D:\Messenger\Garena Plus\bbtalk\GarenaTalkOverlay.exe"
File: wrote 107984 to "D:\Messenger\Garena Plus\bbtalk\GarenaTalkWeb.dll"
File: wrote 394744 to "D:\Messenger\Garena Plus\bbtalk\ImageModule.dll"
File: wrote 79824 to "D:\Messenger\Garena Plus\bbtalk\InputHook.dll"
File: wrote 118736 to "D:\Messenger\Garena Plus\bbtalk\JpegModule.dll"

File: wrote 28664 to "D:\Messenger\Garena Plus\bbtalk\LogLib.dll"
File: wrote 73208 to "D:\Messenger\Garena Plus\bbtalk\LogLibEx.dll"
File: wrote 2499024 to "D:\Messenger\Garena Plus\bbtalk\Overlay.dll"
File: wrote 76240 to "D:\Messenger\Garena Plus\bbtalk\PluginKernel.dll"
File: wrote 111608 to "D:\Messenger\Garena Plus\bbtalk\PngModule.dll"
File: wrote 39376 to "D:\Messenger\Garena Plus\bbtalk\ServerMemAlloc.dll"
File: wrote 333264 to "D:\Messenger\Garena Plus\bbtalk\Update.exe"
File: wrote 26112 to "D:\Messenger\Garena Plus\bbtalk\VersionModule.dll"
File: wrote 102864 to "D:\Messenger\Garena Plus\bbtalk\audiohost.dll"
File: wrote 829944 to "D:\Messenger\Garena Plus\bbtalk\gagmhook.dll"
File: wrote 61944 to "D:\Messenger\Garena Plus\bbtalk\ggdllhost.exe"
File: wrote 803280 to "D:\Messenger\Garena Plus\bbtalk\ggspawn.dll"

File: wrote 10 to "D:\Messenger\Garena Plus\bbtalk\gtalk.version"
File: wrote 1116152 to "D:\Messenger\Garena Plus\bbtalk\libeay32.dll"
File: wrote 250872 to "D:\Messenger\Garena Plus\bbtalk\libmp3lame.dll"
File: wrote 54224 to "D:\Messenger\Garena Plus\bbtalk\lollauncher.dll"
File: wrote 460648 to "D:\Messenger\Garena Plus\bbtalk\sqlite3.dll"
File: wrote 257488 to "D:\Messenger\Garena Plus\bbtalk\ssleay32.dll"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\lib" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\lib" created
File: wrote 120872 to "D:\Messenger\Garena Plus\bbtalk\lib\AudioMixerLib.dll"
File: wrote 42488 to "D:\Messenger\Garena Plus\bbtalk\lib\ChannelUrlDll.dll"
File: wrote 89592 to "D:\Messenger\Garena Plus\bbtalk\lib\FileManager.dll"
File: wrote 386552 to "D:\Messenger\Garena Plus\bbtalk\lib\Http.dll"
File: wrote 54736 to "D:\Messenger\Garena Plus\bbtalk\lib\IPCLib.dll"
File: wrote 59856 to "D:\Messenger\Garena Plus\bbtalk\lib\InputHookLib.dll"

File: wrote 67624 to "D:\Messenger\Garena Plus\bbtalk\lib\LangLib.dll"
File: wrote 43472 to "D:\Messenger\Garena Plus\bbtalk\lib\MP3Saver.dll"
File: wrote 2807248 to "D:\Messenger\Garena Plus\bbtalk\lib\MediaEngine.dll"
File: wrote 147448 to "D:\Messenger\Garena Plus\bbtalk\lib\MessagePumpLib.dll"
File: wrote 1060816 to "D:\Messenger\Garena Plus\bbtalk\lib\RealTimeVideoEngine.dll"
File: wrote 69112 to "D:\Messenger\Garena Plus\bbtalk\lib\ResLib.dll"
File: wrote 140752 to "D:\Messenger\Garena Plus\bbtalk\lib\TcpClient.dll"
File: wrote 123856 to "D:\Messenger\Garena Plus\bbtalk\lib\UILayout.dll"
File: wrote 868904 to "D:\Messenger\Garena Plus\bbtalk\lib\UILib.dll"
File: wrote 150008 to "D:\Messenger\Garena Plus\bbtalk\lib\UdpClient.dll"
File: wrote 68560 to "D:\Messenger\Garena Plus\bbtalk\lib\XmlUIModule.dll"
File: wrote 437240 to "D:\Messenger\Garena Plus\bbtalk\lib\exchndl.dll"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins" (1)

CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins" created
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook" created
File: wrote 69584 to "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\HookAPI.dll"
File: wrote 304680 to "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\OverlayHookD3D10.dll"
File: wrote 263672 to "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\OverlayHookDInput8.dll"
File: wrote 644088 to "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\OverlayUI.dll"
File: wrote 768 to "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\hookpolicy.xml"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\resource" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\resource" created
File: wrote 62215 to "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\resource\app"
File: wrote 65307 to "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\resource\ui"

CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\resource\fx" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\resource\fx" created
File: wrote 1696 to "D:\Messenger\Garena Plus\bbtalk\plugins\D3DHook\resource\fx\render.fx"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook" created
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x64" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x64" created
File: wrote 656848 to "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x64\audiohook.dll"
File: wrote 245752 to "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x64\audiohost.dll"
File: wrote 159224 to "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x64\audioproxy.exe"
File: wrote 122832 to "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x64\hookhelper.exe"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x86" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x86" created
File: wrote 564264 to "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x86\audiohook.dll"
File: wrote 199160 to "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x86\audiohost.dll"
File: wrote 134648 to "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x86\audioproxy.exe"

File: wrote 107000 to "D:\Messenger\Garena Plus\bbtalk\plugins\audiohook\x86\hookhelper.exe"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\npPlugin" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\npPlugin" created
File: wrote 28152 to "D:\Messenger\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer" created
File: wrote 91089 to "D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer\bg_tex.png"
File: wrote 8039 to "D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer\dell_logo.png"
File: wrote 422 to "D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer\loading.png"
File: wrote 1538 to "D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer\pause.png"
File: wrote 7670224 to "D:\Messenger\Garena Plus\bbtalk\plugins\ttplayer\talktalk_player_plugin.exe"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\resource" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\resource" created
File: wrote 2611625 to "D:\Messenger\Garena Plus\bbtalk\resource\app"
File: wrote 3921374 to "D:\Messenger\Garena Plus\bbtalk\resource\ui_lol"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\resource\audio" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\resource\audio" created

File: wrote 6820 to "D:\Messenger\Garena Plus\bbtalk\resource\audio\beep.wav"
File: wrote 60308 to "D:\Messenger\Garena Plus\bbtalk\resource\audio\in.wav"
File: wrote 106072 to "D:\Messenger\Garena Plus\bbtalk\resource\audio\out.wav"
File: wrote 78380 to "D:\Messenger\Garena Plus\bbtalk\resource\audio\play_diagnosis.wav"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\resource\fonts" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\resource\fonts" created
File: wrote 145940 to "D:\Messenger\Garena Plus\bbtalk\resource\fonts\georgiab.ttf"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\update" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\update" created
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\update\lib" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\update\lib" created
File: wrote 90064 to "D:\Messenger\Garena Plus\bbtalk\update\lib\FileManager.dll"
File: wrote 387024 to "D:\Messenger\Garena Plus\bbtalk\update\lib\Http.dll"
File: wrote 54736 to "D:\Messenger\Garena Plus\bbtalk\update\lib\IPCLib.dll"
File: wrote 68560 to "D:\Messenger\Garena Plus\bbtalk\update\lib\LangLib.dll"

File: wrote 147920 to "D:\Messenger\Garena Plus\bbtalk\update\lib\MessagePumpLib.dll"
File: wrote 123384 to "D:\Messenger\Garena Plus\bbtalk\update\lib\UILayout.dll"
File: wrote 868904 to "D:\Messenger\Garena Plus\bbtalk\update\lib\UILib.dll"
File: wrote 68088 to "D:\Messenger\Garena Plus\bbtalk\update\lib\XmlUIModule.dll"
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\update\resource" (1)
CreateDirectory: "D:\Messenger\Garena Plus\bbtalk\update\resource" created
File: wrote 2530 to "D:\Messenger\Garena Plus\bbtalk\update\resource\app"
File: wrote 130610 to "D:\Messenger\Garena Plus\bbtalk\update\resource\ui"
CreateDirectory: "D:\Messenger\Garena Plus\garena.game.plugins" (1)
File: wrote 316407 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.ak47en"
File: wrote 338432 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.ak47th"
File: wrote 212693 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.ava"
File: wrote 537246 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.avatw"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.bnsth"
File: wrote 450911 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.bnsth"
File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.bnsvn"

File: wrote 598342 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.bnsvn"
File: wrote 705921 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.common"
File: wrote 110726 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.fo3"
File: wrote 208323 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.fo3id"
File: wrote 227528 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.fo3th"
File: wrote 241849 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.fo3vn"
File: wrote 989806 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.gtv"
File: wrote 333702 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.headvn"
File: wrote 822701 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.hon"
File: wrote 792368 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.honpbt"
File: wrote 363037 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.jetth"
File: wrote 498214 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.jettw"
File: wrote 586742 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.jetvn"

File: overwriteflag=0, allowskipfilesflag=2, name="garena.game.kgid"
File: wrote 407730 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.kgid"
File: wrote 277628 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.kgth"
File: wrote 392813 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.kgvn"
File: wrote 413890 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.kofvn"
File: wrote 421265 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.lfstw"
File: wrote 808546 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.lol"
File: wrote 377363 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.lolid"
File: wrote 338657 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.lolph"
File: wrote 390538 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.lolth"
File: wrote 476587 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.loltw"
File: wrote 250602 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.lolvn"
File: wrote 302689 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.lsth"

File: wrote 499299 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.lstw"
File: wrote 240689 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.mhtw"
File: wrote 399168 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.mpth"
File: wrote 398149 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.mptw"
File: wrote 783133 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.mstartw"
File: wrote 218421 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.pbid"
File: wrote 632538 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.pbph"
File: wrote 181934 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.pbth"
File: wrote 611426 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.poetw"
File: wrote 427347 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.shenwuvn"
File: wrote 832416 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.vsth"
File: wrote 314011 to "D:\Messenger\Garena Plus\garena.game.plugins\garena.game.westtw"
CreateDirectory: "D:\Messenger\Garena Plus\gtv" (1)

File: wrote 577528 to "D:\Messenger\Garena Plus\gtv\CrashReporter.exe"
File: wrote 350672 to "D:\Messenger\Garena Plus\gtv\GarenaTV.exe"
File: wrote 4692472 to "D:\Messenger\Garena Plus\gtv\Qt5Core.dll"
File: wrote 3234768 to "D:\Messenger\Garena Plus\gtv\Qt5Gui.dll"
File: wrote 4477392 to "D:\Messenger\Garena Plus\gtv\Qt5Widgets.dll"
File: wrote 535544 to "D:\Messenger\Garena Plus\gtv\commutil.dll"
File: wrote 162808 to "D:\Messenger\Garena Plus\gtv\cryptutil.dll"
File: wrote 1231000 to "D:\Messenger\Garena Plus\gtv\dbghelp.dll"
File: wrote 263120 to "D:\Messenger\Garena Plus\gtv\ipc.dll"
File: wrote 265768 to "D:\Messenger\Garena Plus\gtv\libprotobuf-lite.dll"
File: wrote 1936320 to "D:\Messenger\Garena Plus\gtv\log4cxx.dll"
File: wrote 455328 to "D:\Messenger\Garena Plus\gtv\msvcp120.dll"
File: wrote 970912 to "D:\Messenger\Garena Plus\gtv\msvcr120.dll"

File: wrote 36856 to "D:\Messenger\Garena Plus\gtv\objbase.dll"
CreateDirectory: "D:\Messenger\Garena Plus\gtv\libs" (1)
File: wrote 563712 to "D:\Messenger\Garena Plus\gtv\libs\avutil-55.dll"
File: wrote 55760 to "D:\Messenger\Garena Plus\gtv\libs\filesystem.dll"
File: wrote 451064 to "D:\Messenger\Garena Plus\gtv\libs\gxxconfigmanager.dll"
File: wrote 1274872 to "D:\Messenger\Garena Plus\gtv\libs\gxxdatabasemanager.dll"
File: wrote 684536 to "D:\Messenger\Garena Plus\gtv\libs\gxxdatamodel.dll"
File: wrote 317480 to "D:\Messenger\Garena Plus\gtv\libs\gxxfilesystemmanager.dll"
File: wrote 167888 to "D:\Messenger\Garena Plus\gtv\libs\gxxframework.dll"
File: wrote 1396688 to "D:\Messenger\Garena Plus\gtv\libs\gxxhttpdownloader.dll"
File: wrote 462800 to "D:\Messenger\Garena Plus\gtv\libs\gxxhttpnetmanager.dll"
File: wrote 364584 to "D:\Messenger\Garena Plus\gtv\libs\gxxmiscutil.dll"
File: wrote 2236880 to "D:\Messenger\Garena Plus\gtv\libs\gxxnetmanager.dll"

File: wrote 1907704 to "D:\Messenger\Garena Plus\gtv\libs\gxxuibase.dll"
File: wrote 2839040 to "D:\Messenger\Garena Plus\gtv\libs\libstream.dll"
File: wrote 289792 to "D:\Messenger\Garena Plus\gtv\libs\swresample-2.dll"
CreateDirectory: "D:\Messenger\Garena Plus\gtv\libs\data" (1)
CreateDirectory: "D:\Messenger\Garena Plus\gtv\libs\data\x64" (1)
File: wrote 158720 to "D:\Messenger\Garena Plus\gtv\libs\data\x64\get-graphics-offsets.exe"
File: wrote 1145808 to "D:\Messenger\Garena Plus\gtv\libs\data\x64\graphics-hook.dll"
File: wrote 159184 to "D:\Messenger\Garena Plus\gtv\libs\data\x64\inject-helper.exe"
CreateDirectory: "D:\Messenger\Garena Plus\gtv\libs\data\x86" (1)
File: wrote 2106216 to "D:\Messenger\Garena Plus\gtv\libs\data\x86\D3DCompiler_43.dll"
File: wrote 148480 to "D:\Messenger\Garena Plus\gtv\libs\data\x86\get-graphics-offsets.exe"
File: wrote 865272 to "D:\Messenger\Garena Plus\gtv\libs\data\x86\graphics-hook.dll"
File: wrote 148944 to "D:\Messenger\Garena Plus\gtv\libs\data\x86\inject-helper.exe"
CreateDirectory: "D:\Messenger\Garena Plus\gtv\libs\imageformats" (1)

File: wrote 43984 to "D:\Messenger\Garena Plus\gtv\libs\imageformats\qgif.dll"
File: wrote 44496 to "D:\Messenger\Garena Plus\gtv\libs\imageformats\qico.dll"
File: wrote 262608 to "D:\Messenger\Garena Plus\gtv\libs\imageformats\qjpeg.dll"
CreateDirectory: "D:\Messenger\Garena Plus\gtv\libs\platforms" (1)
File: wrote 961488 to "D:\Messenger\Garena Plus\gtv\libs\platforms\qwindows.dll"
CreateDirectory: "D:\Messenger\Garena Plus\gtv\plugins" (1)
File: wrote 501712 to "D:\Messenger\Garena Plus\gtv\plugins\gtvcoreplugin.dll"
File: wrote 610256 to "D:\Messenger\Garena Plus\gtv\plugins\gtvplatform.dll"
File: wrote 1512952 to "D:\Messenger\Garena Plus\gtv\plugins\gtvui.dll"
CreateDirectory: "D:\Messenger\Garena Plus\gtv\res" (1)
File: wrote 311027 to "D:\Messenger\Garena Plus\gtv\res\gtvui.rcc"
File: wrote 1251837 to "D:\Messenger\Garena Plus\gtv\res\gxx.rcc"
File: wrote 529193 to "D:\Messenger\Garena Plus\gtv\res\im.rcc"
File: wrote 260547 to "D:\Messenger\Garena Plus\gtv\res\resource.dat"
CreateDirectory: "D:\Messenger\Garena Plus\lib" (1)

CreateDirectory: "D:\Messenger\Garena Plus\lib" created
File: wrote 386552 to "D:\Messenger\Garena Plus\lib\Http.dll"
File: wrote 197112 to "D:\Messenger\Garena Plus\lib\MP3Module.dll"
File: wrote 232440 to "D:\Messenger\Garena Plus\lib\TaskManagerLib.dll"
File: wrote 164856 to "D:\Messenger\Garena Plus\lib\UILayout.dll"
File: wrote 970280 to "D:\Messenger\Garena Plus\lib\XLL.dll"
File: wrote 67112 to "D:\Messenger\Garena Plus\lib\XmlUIModule.dll"
File: wrote 44149 to "D:\Messenger\Garena Plus\lib\xlldata"
CreateDirectory: "D:\Messenger\Garena Plus\lib\delay_load" (1)
CreateDirectory: "D:\Messenger\Garena Plus\lib\delay_load" created
File: wrote 78800 to "D:\Messenger\Garena Plus\lib\delay_load\AudioMixerLib.dll"
File: wrote 29176 to "D:\Messenger\Garena Plus\lib\delay_load\ClientTcp.dll"
File: wrote 1557544 to "D:\Messenger\Garena Plus\lib\delay_load\FileSender.dll"
File: wrote 968696 to "D:\Messenger\Garena Plus\lib\delay_load\GaFileTransfer.dll"

File: wrote 210384 to "D:\Messenger\Garena Plus\lib\delay_load\GaVoiceGroup.dll"
File: wrote 257528 to "D:\Messenger\Garena Plus\lib\delay_load\MediaEngine.dll"
File: wrote 529400 to "D:\Messenger\Garena Plus\lib\delay_load\RSALib.dll"
File: wrote 81360 to "D:\Messenger\Garena Plus\lib\delay_load\UdtLib.dll"
CreateDirectory: "D:\Messenger\Garena Plus\lib\fs" (1)
CreateDirectory: "D:\Messenger\Garena Plus\lib\fs" created
File: wrote 182824 to "D:\Messenger\Garena Plus\lib\fs\YYFileSystem.dll"
CreateDirectory: "D:\Messenger\Garena Plus\theme" (1)
CreateDirectory: "D:\Messenger\Garena Plus\theme" created
File: wrote 46541 to "D:\Messenger\Garena Plus\theme\default.gtheme"
CreateDirectory: "D:\Messenger\Garena Plus\x86" (1)
File: wrote 795088 to "D:\Messenger\Garena Plus\x86\graphics-hook.dll"
File: wrote 148944 to "D:\Messenger\Garena Plus\x86\inject-helper.exe"
Exec: command=""D:\Messenger\Garena Plus\ggdllhost.exe" "D:\Messenger\Garena

Exec: success (""D:\Messenger\Garena Plus\ggdllhost.exe" "D:\Messenger\Garena

Delete: DeleteFile("C:\Users\Public\Desktop\Garena+.lnk")

Menu\Programs\Garena\Garena+.lnk", in: "D:\Messenger\Garena Plus\GarenaMessenger.exe ", icon:
,0, sw=0, hk=0

Menu\Programs\Garena\Garena+\Garena+.lnk", in: "D:\Messenger\Garena Plus\GarenaMessenger.exe
", icon: ,0, sw=0, hk=0
CreateShortCut: out: "C:\Users\Public\Desktop\Garena+.lnk", in: "D:\Messenger\Garena

WriteINIStr: wrote [game] im=D:\Messenger\Garena Plus in C:\ProgramData\GarenaMessenger\app.ini
created uninstaller: 598970, "D:\Messenger\Garena Plus\uninst.exe"
"UninstallString"="D:\Messenger\Garena Plus\uninst.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Garena\im" "Path"="D:\Messenger\Garena Plus"
Call: 989

Call: 762
Call: 989

name="C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\System.dll"
File: skipped: "C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\System.dll" (overwriteflag=1)
Jump: 769
Jump: 96
"NSIS:Language"="1033"
Call: 255
Jump: 269
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
WriteINIStr: wrote [Settings] NextButtonText=&Finish in

C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\ioSpecial.ini
WriteINIStr: wrote [Field 3] Top=45 in C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\ioSpecial.ini
Call: 255
Jump: 269
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
WriteINIStr: wrote [Field 2] Text=Completing the Garena+ Setup Wizard in


Call: 255
Jump: 269
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 282
Jump: 268
Jump: 282
Jump: 268
Jump: 282
Jump: 268
Jump: 282
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
WriteINIStr: wrote [Field 3] Text=Garena+ has been installed on your computer.\r\n\r\nClick Finish to
close this wizard. in C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\ioSpecial.ini
WriteINIStr: wrote [Field 4] Type=CheckBox in

Call: 255
Jump: 269
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
Jump: 268
WriteINIStr: wrote [Field 4] Text=&Run Garena+ in

WriteINIStr: wrote [Field 4] Left=120 in C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\ioSpecial.ini
WriteINIStr: wrote [Field 4] Right=315 in C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\ioSpecial.ini

WriteINIStr: wrote [Field 4] Top=90 in C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\ioSpecial.ini

WriteINIStr: wrote [Field 4] State=1 in C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\ioSpecial.ini
WriteINIStr: wrote [Settings] Numfields=4 in

Call: 898
Jump: 903
Call: 989

name="C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\InstallOptions.dll"
File: skipped: "C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\InstallOptions.dll" (overwriteflag=1)
Call: 903
Call: 989

name="C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\InstallOptions.dll"
File: skipped: "C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\InstallOptions.dll" (overwriteflag=1)
Call: 908
Jump: 912
Call: 912
Exec: command="D:\Messenger\Garena Plus\GarenaMessenger.exe"
Exec: success ("D:\Messenger\Garena Plus\GarenaMessenger.exe")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\gginst.dll")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\InstallOptions.dll")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\ioSpecial.ini")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\LangDLL.dll")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\modern-header.bmp")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\modern-wizard.bmp")
Delete: DeleteFile("C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\RDC\AppData\Local\Temp\nsc9E6B.tmp\")

Dokumen RKT

Transféré par

Informations du document

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

Dokumen RKT

Transféré par

Droits d'auteur :

Formats disponibles

CreateDirectory: "C:\Program Files (x86)\Garena Plus" created

File: overwriteflag=1, allowskipfilesflag=2,

File: skipped: "C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\gginst.dll" (overwriteflag=1)

Delete: "C:\Program Files (x86)\Garena Plus\data"

Delete: "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe"

Delete: "C:\Program Files (x86)\Garena Plus\GaVoice.exe"

Delete: "C:\Program Files (x86)\Garena Plus\ggcode.dll"

Delete: "C:\Program Files (x86)\Garena Plus\ggdownloader.dll"

Delete: "C:\Program Files (x86)\Garena Plus\PluginAdminExec.exe"

Delete: "C:\Program Files (x86)\Garena Plus\UpdateEx.exe"

Delete: "C:\Program Files (x86)\Garena Plus\VersionModule.dll"

Delete: "C:\Program Files (x86)\Garena Plus\config.ini"

RMDir: "C:\Program Files (x86)\Garena Plus\lib"

RMDir: "C:\Program Files (x86)\Garena Plus\Plugins"

RMDir: "C:\Program Files (x86)\Garena Plus\Sound"

RMDir: "C:\Program Files (x86)\Garena Plus\theme"

RMDir: "C:\Program Files (x86)\Garena Plus\restore"

RMDir: "C:\Program Files (x86)\Garena Plus\restore_"

RMDir: "C:\Program Files (x86)\Garena Plus\bbtalk"

File: overwriteflag=1, allowskipfilesflag=2,

File: wrote 11264 to "C:\Users\RDC\AppData\Local\Temp\nshD688.tmp\System.dll"

CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore" (0)

CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore_\280352469" (0)

CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore_" created

CreateDirectory: "C:\Program Files (x86)\Garena Plus\restore_\280352469" created

Rename: C:\Program Files (x86)\Garena Plus\ggspawn.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\ggspawn.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\ggspawn.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\ggspawn.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\ggdllhost.exe->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\ggdllhost.exe->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\ggdllhost.exe->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\ggdllhost.exe->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\gamehook.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\gamehook.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\gagmhook.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\gagmhook.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\ggcode.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\CommonLib.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\CommonLib.dll->C:\Program Files

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\Overlay.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\Overlay.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\PluginKernel.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\PluginKernel.dll->C:\Program Files

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\HookAPI.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\HookAPI.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayHookD3D8.dll->C:\Program Files

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayHookD3D8.dll->C:\Program Files

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayHookD3D9.dll->C:\Program Files

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayHookD3D9.dll->C:\Program Files

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayHookDInput8.dll->C:\Program Files

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayHookDInput8.dll->C:\Program Files

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\OverlayUI.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\Overlay.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\Overlay.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\InputHook.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\InputHook.dll->C:\Program Files (x86)\Garena

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\x86\audiohook.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\x86\audiohook.dll->C:\Program Files

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\x86\audiohost.dll->C:\Program Files (x86)\Garena

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\x86\audiohost.dll->C:\Program Files

Rename: C:\Program Files (x86)\Garena Plus\bbtalk\x86\EasyHook32.dll->C:\Program Files

Rename failed: C:\Program Files (x86)\Garena Plus\bbtalk\x86\EasyHook32.dll->C:\Program Files